hook-variations
Pass
Audited by Gen Agent Trust Hub on Oct 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
subprocessmodule to invokeffmpegandffprobefor video manipulation, re-encoding, and metadata probing across several scripts (build_variants.py,probe_join.py,verify_variants.py,build_review.py). This is the intended behavior for a video processing automation tool, and command arguments are constructed using list-based execution to prevent shell injection. - [DYNAMIC_EXECUTION]: The skill instructions involve the local compilation of a Swift source file (
scripts/avtest.swift) to a binary used for playback verification. This binary interacts with the system'sAVFoundationframework to ensure that generated video files are compatible with native decoders like QuickTime. This is a legitimate technical requirement for the skill's quality assurance process.
Audit Metadata