video-subtitles
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/generate_srt.pyusessubprocess.run()to invokeffmpegfor embedding or burning subtitles into video files. The command is constructed using a list of arguments, which is a safe practice to prevent shell injection. While it does dynamic string interpolation for theffmpegfilter string (filter_str), the inputs are controlled (temporary file paths and hardcoded style strings), minimizing risk. User-supplied input (the video file path) is passed directly as a command-line argument to the script, which is standard for CLI tools.
Audit Metadata