rn-replica-qc
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The Python scripts
scripts/compare_videos.pyandscripts/extract_halfsec_frames.pyutilize thesubprocess.runfunction to execute system utilities includingffmpeg,ffprobe, andcmp. These calls are implemented using argument lists rather than shell strings, which correctly mitigates the risk of command injection from external inputs such as file paths or scale parameters. - [EXTERNAL_DOWNLOADS]: The skill instructions acknowledge that input videos may be provided as URLs. However, it directs the agent to utilize standard environment tools or separate download skills for retrieval, and no network fetching code is present within the skill's own scripts.
- [SAFE]: The logic across all provided files aligns with the stated purpose of video analysis and quality control. The scripts handle file operations safely by expanding and resolving paths, and no evidence of data exfiltration, obfuscation, or persistence mechanisms was found.
Audit Metadata