ffmpeg
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external media files that could contain malicious instructions in metadata or subtitles, which an agent might misinterpret during analysis.
- Ingestion points: Input media files are processed in
SKILL.mdandreference.mdviaffmpeg -iandffprobecommands. - Boundary markers: Absent. There are no instructions to the agent to ignore or delimit potentially untrusted content within media file metadata.
- Capability inventory: The skill performs file writing (creating output media and list files) and command execution via
ffmpegandffprobeinSKILL.mdandreference.md. - Sanitization: Absent. No filtering or sanitization of metadata is performed before the agent processes or displays file information.
- [DYNAMIC_EXECUTION]: The skill provides templates for generating shell scripts to automate media export tasks.
- Evidence:
SKILL.mdcontains a template forexport-all-platforms.shwhich uses fixed logic to automate multiple FFmpeg commands.
Audit Metadata