tesseract-video

Pass

Audited by Gen Agent Trust Hub on Nov 7, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Tesseract rendering engine and conversion utilities from the official mirage-hq GitHub repository, which is the verified vendor.
  • [COMMAND_EXECUTION]: Local Python scripts tesseract_sound.py and tesseract_media.py utilize subprocess.run to execute ffmpeg and ffprobe for media analysis, thumbnail generation, and audio processing.
  • [DYNAMIC_EXECUTION]: The skill supports procedural animation via layerTimeJsCode and custom visual effects through WGSL shaders, both of which are scoped to the Tesseract engine's rendering context.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests local media files and project JSON documents which could potentially contain instructions in metadata. Ingestion points: Local media files and project JSON. Boundary markers: Not explicitly enforced for media binary data. Capability inventory: File system access and local command execution (ffmpeg, tsrct). Sanitization: Binary media processing relies on standard decoder security.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 7, 2026, 04:00 AM