skills/terminalskills/skills/ffmpeg/Gen Agent Trust Hub

ffmpeg

Warn

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: MEDIUMPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The installation instructions for Ubuntu/Debian recommend using sudo apt install, which grants the process root-level access to the system for package installation.
  • [INDIRECT_PROMPT_INJECTION]: The skill operates on user-provided media files through shell commands, creating a surface for indirect prompt injection if files contain malicious metadata or are named to exploit shell behavior. 1. Ingestion points: User-provided input files in SKILL.md steps 2 through 10. 2. Boundary markers: Not present; the instructions do not specify how to distinguish between trusted commands and untrusted file data. 3. Capability inventory: Subprocess execution via ffmpeg and ffprobe, and file system write operations for output media. 4. Sanitization: No sanitization or validation steps are included for the input file data.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 23, 2026, 04:31 PM
Security Audit — agent-trust-hub — ffmpeg