image-to-video

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes subprocess.run in scripts/image_to_video.py to execute ffmpeg and ffprobe for video creation and metadata analysis.
  • Commands are constructed as lists of arguments rather than shell strings, which is a standard security practice to prevent shell injection vulnerabilities.
  • All parameters used in FFmpeg filter strings, such as dimensions and visualization modes, are derived from validated internal presets or whitelisted values defined in the script.
  • [EXTERNAL_DOWNLOADS]: The SKILL.md file provides setup instructions for installing the ffmpeg utility via official system package managers like brew or apt.
  • These references target well-known and trusted software distributions necessary for the skill's media processing functionality.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 10:53 AM
Security Audit — agent-trust-hub — image-to-video