rn-human-motion-extractor
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/extract_motion.pyexecutesffmpegandffprobeusingsubprocess.runwith arguments provided as a list. This is a secure implementation that avoids shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The skill specifies standard Python dependencies (mediapipe, numpy, and opencv-python-headless) in
scripts/requirements.txt. These are well-known libraries for computer vision tasks and are sourced from official registries. - [INDIRECT_PROMPT_INJECTION]: While the skill processes user-provided video files, the extraction process focuses on numerical landmark data and technical metadata. The use of structured outputs and isolated execution environments mitigates the risk of external content influencing the agent's logic.
Audit Metadata