ffmpeg-media-finishing
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides documentation for using
ffmpegandffprobeand includes a Python utility for media auditing. scripts/media_probe.pyusessubprocess.runto invoke theffprobeexecutable.- The implementation uses an argument list and avoids the shell (
shell=False), which is the recommended method to prevent shell injection attacks. The commands documented inSKILL.mdare standard media processing utilities. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external media files and interpret their metadata.
- Ingestion points: The
media_probe.pyscript (called by the agent) ingests the output offfprobein JSON format. - Boundary markers: The script employs a structured internal report schema to isolate external data and uses explicit logic to compare results against expectations.
- Capability inventory: The skill allows for local file reading and metadata extraction (via
ffprobe) and media transcoding (viaffmpeg). - Sanitization: The Python helper implements strict data parsing using the
jsonmodule, type validation, and finiteness checks for all numeric metadata, protecting the agent from malformed metadata fields.
Audit Metadata