media-processing
Pass
Audited by Gen Agent Trust Hub on Apr 11, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The Python utility scripts (batch_resize.py, media_convert.py, and video_optimize.py) utilize subprocess.run to invoke local system binaries for media processing. The implementation correctly passes commands as lists of arguments, which avoids shell invocation and mitigates command injection risks.
- [COMMAND_EXECUTION]: The skill documentation includes instructions for system-level operations using sudo, specifically for installing dependencies and modifying the ImageMagick security policy file (/etc/ImageMagick-7/policy.xml). These instructions are provided in the context of standard administrative setup.
Audit Metadata