video-frames
Pass
Audited by Gen Agent Trust Hub on Aug 4, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/frame.shscript executes theffmpegcommand-line utility. All user-supplied variables (input path, output path, and timestamp) are double-quoted within the script to prevent shell word-splitting and command injection. - [SAFE]: The skill implements input validation, specifically checking that the
--indexparameter is a non-negative integer and verifying that both the input file and theffmpegbinary are present before attempting execution. - [SAFE]: A no-clobber mechanism is used to prevent the script from overwriting existing files at the output path unless explicitly instructed, reducing the risk of accidental data loss.
Audit Metadata