wjs-reframing-video
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Downloads the MediaPipe face landmarker model from Google's official storage repository to enable visual tracking features.
- [COMMAND_EXECUTION]: Utilizes the
subprocessmodule to runffmpegandffprobefor video analysis and transformation. These commands are integral to the skill's purpose of reframing media. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: Analyzes video files provided by the user via file paths.
- Boundary markers: The script does not use specific delimiters for the input path.
- Capability inventory: Employs
subprocess.runto interact with system-level video tools inscripts/crop.py. - Sanitization: Paths are handled as discrete arguments in the command list passed to the
subprocessmodule, mitigating common command injection risks.
Audit Metadata