video-understand

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The Python script scripts/understand_video.py uses subprocess.run with list-based arguments to call ffmpeg and ffprobe. This approach prevents shell injection vulnerabilities when handling user-provided file paths.
  • [EXTERNAL_DOWNLOADS]: The skill contains a routine to install the openai-whisper library via pip if the user requests transcription and the library is missing. This involves a well-known dependency from a trusted provider.
  • [SAFE]: No signs of malicious activity, such as obfuscation, credential harvesting, or suspicious network communication, were found. The skill's operations are confined to local video processing as described in its documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 04:37 AM