lov-list-videos
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
ffprobe(a component of FFmpeg) viasubprocess.runto extract video metadata like duration and resolution. These calls use argument lists rather than shell strings, which prevents shell injection vulnerabilities. - [COMMAND_EXECUTION]: The provided test suite (
tests/test_list_videos.py) usessubprocess.runto execute the main script for functional verification. - [DATA_EXPOSURE]: The skill scans local file systems (home directory and external volumes) to inventory video files. This is the primary intended function. It implements a robust default exclusion list to avoid sensitive system paths (e.g.,
~/Library/Application Support,node_modules) and only records file metadata into a local cache file with restricted permissions (0600).
Audit Metadata