media-use
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements video processing logic by invoking the
ffmpegandffprobesystem utilities. Commands are constructed as lists and executed viasubprocess.runwithout a shell, which prevents command injection vulnerabilities. - [SAFE]: Dependency management uses
uvwith standard, reputable packages (typer,rich). No suspicious or unversioned external dependencies are loaded at runtime. - [SAFE]: No obfuscation, data exfiltration, or persistence techniques were detected. The scripts handle file paths and metadata securely, following standard Python practices.
- [SAFE]: The skill includes a bundled font file for watermarking, which is a common practice to ensure consistent rendering across different systems and does not pose a security risk.
Audit Metadata