timecode
Pass
Audited by Gen Agent Trust Hub on Aug 15, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands via the
subprocessmodule to interact with media analysis tools. ffprobeis used inscripts/_mediaskills_common.pyandscripts/extract.pyto read duration and timecode metadata from media files.- The commands are constructed using lists (e.g.,
['ffprobe', '-v', 'quiet', ... ]), which follow security best practices to prevent command injection. - Use of
ffprobeis consistent with the skill's stated purpose of timecode extraction and metadata analysis. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns were found. The skill relies on local execution of its provided scripts and standard Python library dependencies.
- [DATA_EXFILTRATION]: No data exfiltration attempts were detected. The scripts operate on local media files and metadata, and there are no network operations outside of standard package management via
uv run.
Audit Metadata