skills/iflytek/skillhub/video-frames/Gen Agent Trust Hub

video-frames

Pass

Audited by Gen Agent Trust Hub on Aug 4, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/frame.sh script executes the ffmpeg command-line utility. All user-supplied variables (input path, output path, and timestamp) are double-quoted within the script to prevent shell word-splitting and command injection.
  • [SAFE]: The skill implements input validation, specifically checking that the --index parameter is a non-negative integer and verifying that both the input file and the ffmpeg binary are present before attempting execution.
  • [SAFE]: A no-clobber mechanism is used to prevent the script from overwriting existing files at the output path unless explicitly instructed, reducing the risk of accidental data loss.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 4, 2026, 02:06 AM
Security Audit — agent-trust-hub — video-frames