video-frames
Pass
Audited by Gen Agent Trust Hub on May 28, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bash script (
scripts/frame.sh) to execute theffmpegcommand-line tool. It correctly uses double-quoting for variable interpolation of file paths and user arguments, minimizing the risk of shell command injection. - [EXTERNAL_DOWNLOADS]: The skill metadata specifies a dependency on
ffmpegand provides instructions to install it via Homebrew (brew install ffmpeg). This is a legitimate requirement for the skill's stated purpose of video frame extraction. - [SAFE]: No obfuscation, data exfiltration, or malicious persistence mechanisms were detected. The skill's behavior is consistent with its documentation.
Audit Metadata