video-rough-cut

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill heavily relies on the subprocess module to execute ffmpeg and ffprobe for media processing tasks, such as in scripts/cut_render.py and scripts/selfcheck_frames.py. These calls use list-based arguments to prevent shell injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The skill uses the yt-dlp utility to download video content from remote URLs provided by the user, which is a core part of its intended functionality.
  • [COMMAND_EXECUTION]: The script scripts/transcribe.py uses importlib.util to dynamically load and execute a transcription module from a sibling directory. This pattern is used for code reuse across modular skills and points to a local, predictable path.
  • [COMMAND_EXECUTION]: Automated tests and protocol checks (scripts/check_project_protocol.py, tests/test_inspect_bounds.py) use subprocess.run to execute internal Python scripts for validation, following safe execution practices.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 01:38 PM