hook-variations

Pass

Audited by Gen Agent Trust Hub on Oct 30, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the subprocess module to invoke ffmpeg and ffprobe for video manipulation, re-encoding, and metadata probing across several scripts (build_variants.py, probe_join.py, verify_variants.py, build_review.py). This is the intended behavior for a video processing automation tool, and command arguments are constructed using list-based execution to prevent shell injection.
  • [DYNAMIC_EXECUTION]: The skill instructions involve the local compilation of a Swift source file (scripts/avtest.swift) to a binary used for playback verification. This binary interacts with the system's AVFoundation framework to ensure that generated video files are compatible with native decoders like QuickTime. This is a legitimate technical requirement for the skill's quality assurance process.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 30, 2026, 05:24 PM