video-frames

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [SAFE]: No malicious patterns, obfuscation, or unauthorized data access behaviors were detected. The skill performs its stated function of video frame extraction using standard system utilities.
  • [EXTERNAL_DOWNLOADS]: The skill instructions reference ffmpeg.org and recommend installation via Homebrew (brew), which is a well-known and trusted package management service for developers.
  • [COMMAND_EXECUTION]: The script scripts/frame.sh executes the ffmpeg binary. It correctly uses double-quotes around variables (e.g., "$in", "$out") to prevent shell word-splitting and command injection from filenames. While the script does not explicitly sanitize the --time or --index arguments, this represents a standard functional implementation for an agent-controlled tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 08:32 AM
Security Audit — agent-trust-hub — video-frames