gemini-omni-flash-api
Pass
Audited by Gen Agent Trust Hub on Sep 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- Safe Command Execution: The skill utilizes
ffmpegandffprobefor essential video processing tasks like trimming, scaling, and metadata inspection. These tools are invoked usingsubprocess.runwith argument lists rather than shell strings, which is a recommended practice to prevent command injection. - Robust Credential Protection: The scripts demonstrate a high level of security awareness regarding API keys. The
sanitize_errorfunctions ingenerate_video.pyandupload_file.pyinclude extensive regex-based redaction to ensure thatGEMINI_API_KEYvalues, OAuth tokens, and sensitive query parameters are removed from any error messages or logs before being displayed. - Trusted Resource Usage: All network communications and SDK dependencies are associated with official Google Gemini services. The skill uses the official
google-genaiPython SDK for model interactions and file management. - Data Handling Considerations: As an AI-powered media processing tool, the skill ingests user prompts and local media files. While this represents a potential surface for indirect prompt injection, the risk is mitigated by the underlying model's safety guardrails and the skill's specific focus on media generation rather than general-purpose system administration.
Audit Metadata