ffmpeg
Warn
Audited by Gen Agent Trust Hub on Sep 23, 2026
Risk Level: MEDIUMPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The installation instructions for Ubuntu/Debian recommend using
sudo apt install, which grants the process root-level access to the system for package installation. - [INDIRECT_PROMPT_INJECTION]: The skill operates on user-provided media files through shell commands, creating a surface for indirect prompt injection if files contain malicious metadata or are named to exploit shell behavior. 1. Ingestion points: User-provided input files in
SKILL.mdsteps 2 through 10. 2. Boundary markers: Not present; the instructions do not specify how to distinguish between trusted commands and untrusted file data. 3. Capability inventory: Subprocess execution viaffmpegandffprobe, and file system write operations for output media. 4. Sanitization: No sanitization or validation steps are included for the input file data.
Audit Metadata