video-understand

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/understand_video.py invokes external CLI tools including ffmpeg and ffprobe to perform video probing and frame extraction.
  • Evidence: The _run helper function wraps subprocess.run using argument lists to execute system commands.
  • Context: Commands are constructed as lists, mitigating shell-injection risks typically associated with processing user-provided filenames.
  • [EXTERNAL_DOWNLOADS]: The skill includes functionality to install the openai-whisper package from the official Python Package Index (PyPI) if it is not already present on the system.
  • Evidence: The _check_and_offer_install function in scripts/understand_video.py uses pip install to fetch the library upon user consent.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 10:07 AM
Security Audit — agent-trust-hub — video-understand