hook-variations

Warn

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTION
Full Analysis
  • [DYNAMIC_EXECUTION]: The skill requires the compilation of a provided Swift source file (scripts/avtest.swift) into an executable binary (scripts/avtest) using the system's swiftc compiler. This binary is subsequently executed by the verification script to perform frame-level decoding tests using native system frameworks (AVFoundation) to ensure compatibility with players like QuickTime.
  • [COMMAND_EXECUTION]: Multiple Python scripts within the skill (scripts/build_variants.py, scripts/build_review.py, scripts/verify_variants.py, scripts/probe_join.py) utilize subprocess.run to invoke ffmpeg and ffprobe. These tools are used for probing media metadata, re-encoding video streams, and concatenating segments. The scripts safely pass arguments as lists and retrieve binary paths from environment variables (FFMPEG_PATH, FFPROBE_PATH).
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 20, 2026, 08:46 AM