video-compare-tool

Pass

Audited by Gen Agent Trust Hub on Jul 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
  • [SAFE]: The skill uses subprocess.run to call system utilities like FFmpeg and FFprobe for video processing. These calls are implemented using argument lists and do not use shell=True, which effectively prevents command injection attacks.
  • [SAFE]: File paths provided as input are resolved to absolute paths using Path.resolve() and validated against a white-list of allowed extensions and a maximum file size limit (500MB by default). This protects against directory traversal and potential denial-of-service through resource exhaustion.
  • [SAFE]: The tool incorporates execution timeouts for all FFmpeg and FFprobe operations, ensuring that the agent does not hang indefinitely on corrupted or extremely long video files.
  • [EXTERNAL_DOWNLOADS]: The HTML report template (assets/template.html) includes a link to the img-comparison-slider Web Component hosted on unpkg.com. This is a well-known CDN for open-source NPM packages and is used here for the primary purpose of providing the interactive visual comparison interface.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 1, 2026, 12:27 PM
Security Audit — agent-trust-hub — video-compare-tool