composite-split-screen
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/composite_split.pyexecutes theffmpegandffprobeCLI tools to process video clips. These executions are performed securely usingsubprocess.runwith argument lists, which prevents shell command injection. - [PROMPT_INJECTION]: The skill processes untrusted user inputs including file paths and aspect ratio strings. This creates an indirect prompt injection surface; however, the skill mitigates this by using strict validation for numeric parameters (ratio, aspect) and restricting layout and fill modes to a set of predefined choices.
- [DATA_EXPOSURE]: The skill reads from and writes to file paths specified by the user. It does not attempt to access sensitive system files, environment variables, or credentials.
Audit Metadata