video-understand
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The Python script
scripts/understand_video.pyusessubprocess.runwith list-based arguments to callffmpegandffprobe. This approach prevents shell injection vulnerabilities when handling user-provided file paths. - [EXTERNAL_DOWNLOADS]: The skill contains a routine to install the
openai-whisperlibrary viapipif the user requests transcription and the library is missing. This involves a well-known dependency from a trusted provider. - [SAFE]: No signs of malicious activity, such as obfuscation, credential harvesting, or suspicious network communication, were found. The skill's operations are confined to local video processing as described in its documentation.
Audit Metadata