reverse-engineer-animation

Pass

Audited by Gen Agent Trust Hub on Jun 14, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/extract_frames.py invokes the ffmpeg command-line utility using subprocess.run. The command is constructed using a list of arguments rather than a single shell string, which prevents shell injection vulnerabilities. This is a standard and necessary operation for the skill's primary purpose of video frame extraction.
  • [EXTERNAL_DOWNLOADS]: The skill's documentation and scripts reference several well-known and trusted third-party dependencies, including ffmpeg, opencv-python, numpy, and scipy. These are established tools in the data science and media processing communities, and instructions for their installation are provided through official package managers (pip and Homebrew).
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 14, 2026, 09:30 AM
Security Audit — agent-trust-hub — reverse-engineer-animation