video-reference-compare

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/refcompare.js executes ffmpeg and ffprobe via child_process.execFileSync. The command is constructed using an array of arguments, which is a secure practice that prevents shell injection attacks. The external binaries are standard system tools required for the skill's stated purpose.
  • [SAFE]: Analysis of the skill instructions and the accompanying Node.js script reveals no malicious patterns. There is no evidence of prompt injection, data exfiltration, obfuscation, or unauthorized persistence mechanisms. The script follows proper hygiene by using the system's temporary directory and cleaning up resources after execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 01:23 AM