video-analyzer
Pass
Audited by Gen Agent Trust Hub on Apr 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/extract.pyscript executes media tools usingsubprocess.runwith list-based arguments, protecting against command injection from user-provided file paths. - [EXTERNAL_DOWNLOADS]: The skill correctly identifies
ffmpegas an external dependency and directs users to the official project site,ffmpeg.org, a well-known service. - [PROMPT_INJECTION]: The risk of indirect prompt injection from video content is handled by the skill's structured reasoning workflow.
- Ingestion points: Video file paths provided by the user.
- Boundary markers: Defined workflow phases in
SKILL.mdthat isolate visual analysis. - Capability inventory: Subprocess calls limited to ffmpeg/ffprobe for frame extraction.
- Sanitization: Use of
pathliband secure argument handling in the Python script.
Audit Metadata