reverse-engineer-animation
Pass
Audited by Gen Agent Trust Hub on Jun 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/extract_frames.pyinvokes theffmpegcommand-line utility usingsubprocess.run. The command is constructed using a list of arguments rather than a single shell string, which prevents shell injection vulnerabilities. This is a standard and necessary operation for the skill's primary purpose of video frame extraction. - [EXTERNAL_DOWNLOADS]: The skill's documentation and scripts reference several well-known and trusted third-party dependencies, including
ffmpeg,opencv-python,numpy, andscipy. These are established tools in the data science and media processing communities, and instructions for their installation are provided through official package managers (pip and Homebrew).
Audit Metadata