video-subtitles

Pass

Audited by Gen Agent Trust Hub on Oct 16, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/generate_srt.py uses subprocess.run() to invoke ffmpeg for embedding or burning subtitles into video files. The command is constructed using a list of arguments, which is a safe practice to prevent shell injection. While it does dynamic string interpolation for the ffmpeg filter string (filter_str), the inputs are controlled (temporary file paths and hardcoded style strings), minimizing risk. User-supplied input (the video file path) is passed directly as a command-line argument to the script, which is standard for CLI tools.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 16, 2026, 08:02 AM