composite-split-screen

Pass

Audited by Gen Agent Trust Hub on Aug 19, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/composite_split.py executes the ffmpeg and ffprobe CLI tools to process video clips. These executions are performed securely using subprocess.run with argument lists, which prevents shell command injection.
  • [PROMPT_INJECTION]: The skill processes untrusted user inputs including file paths and aspect ratio strings. This creates an indirect prompt injection surface; however, the skill mitigates this by using strict validation for numeric parameters (ratio, aspect) and restricting layout and fill modes to a set of predefined choices.
  • [DATA_EXPOSURE]: The skill reads from and writes to file paths specified by the user. It does not attempt to access sensitive system files, environment variables, or credentials.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 19, 2026, 04:39 PM
Security Audit — agent-trust-hub — composite-split-screen