media-processing
Pass
Audited by Gen Agent Trust Hub on Mar 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The Python scripts (batch_resize.py, media_convert.py, and video_optimize.py) interact with the system's FFmpeg and ImageMagick binaries using the subprocess module. Analysis of the source code confirms that these interactions use argument lists and avoid shell execution, which effectively prevents command injection vulnerabilities from untrusted file names or metadata.
- [SAFE]: The skill does not contain any hardcoded credentials, unauthorized network communication, or prompt injection attempts.
- [SAFE]: The binary file detected in the tests directory (.coverage) is a standard SQLite database generated by the coverage.py tool and contains no malicious content.
- [SAFE]: Installation instructions in the documentation are consistent with standard package management practices for the supported platforms (macOS, Linux, Windows).
Audit Metadata