video-compare-tool
Pass
Audited by Gen Agent Trust Hub on Jul 1, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: The skill uses
subprocess.runto call system utilities like FFmpeg and FFprobe for video processing. These calls are implemented using argument lists and do not useshell=True, which effectively prevents command injection attacks. - [SAFE]: File paths provided as input are resolved to absolute paths using
Path.resolve()and validated against a white-list of allowed extensions and a maximum file size limit (500MB by default). This protects against directory traversal and potential denial-of-service through resource exhaustion. - [SAFE]: The tool incorporates execution timeouts for all FFmpeg and FFprobe operations, ensuring that the agent does not hang indefinitely on corrupted or extremely long video files.
- [EXTERNAL_DOWNLOADS]: The HTML report template (
assets/template.html) includes a link to theimg-comparison-sliderWeb Component hosted onunpkg.com. This is a well-known CDN for open-source NPM packages and is used here for the primary purpose of providing the interactive visual comparison interface.
Audit Metadata