rn-replica-qc

Pass

Audited by Gen Agent Trust Hub on Jul 14, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The Python scripts scripts/compare_videos.py and scripts/extract_halfsec_frames.py utilize the subprocess.run function to execute system utilities including ffmpeg, ffprobe, and cmp. These calls are implemented using argument lists rather than shell strings, which correctly mitigates the risk of command injection from external inputs such as file paths or scale parameters.
  • [EXTERNAL_DOWNLOADS]: The skill instructions acknowledge that input videos may be provided as URLs. However, it directs the agent to utilize standard environment tools or separate download skills for retrieval, and no network fetching code is present within the skill's own scripts.
  • [SAFE]: The logic across all provided files aligns with the stated purpose of video analysis and quality control. The scripts handle file operations safely by expanding and resolving paths, and no evidence of data exfiltration, obfuscation, or persistence mechanisms was found.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 14, 2026, 07:20 PM
Security Audit — agent-trust-hub — rn-replica-qc