skills/steipete/clawdis/video-frames/Gen Agent Trust Hub

video-frames

Pass

Audited by Gen Agent Trust Hub on May 28, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses a bash script (scripts/frame.sh) to execute the ffmpeg command-line tool. It correctly uses double-quoting for variable interpolation of file paths and user arguments, minimizing the risk of shell command injection.
  • [EXTERNAL_DOWNLOADS]: The skill metadata specifies a dependency on ffmpeg and provides instructions to install it via Homebrew (brew install ffmpeg). This is a legitimate requirement for the skill's stated purpose of video frame extraction.
  • [SAFE]: No obfuscation, data exfiltration, or malicious persistence mechanisms were detected. The skill's behavior is consistent with its documentation.
Audit Metadata
Risk Level
SAFE
Analyzed
May 28, 2026, 10:30 AM
Security Audit — agent-trust-hub — video-frames