video-frames

Pass

Audited by Gen Agent Trust Hub on Feb 23, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [DYNAMIC_EXECUTION]: The script scripts/frame.sh executes the ffmpeg binary using subprocess calls, which involves assembling command strings from input arguments.
  • [REMOTE_CODE_EXECUTION]: The skill documentation includes installation instructions for ffmpeg via Homebrew. As Homebrew is a well-known and trusted package manager, this external dependency is considered safe.
  • [INDIRECT_PROMPT_INJECTION]: The scripts/frame.sh script accepts --index and --time arguments which are interpolated into ffmpeg command strings. This represents a potential attack surface if inputs are not properly validated by the agent. \n
  • Ingestion points: Command-line arguments (--index, --time) in scripts/frame.sh.\n
  • Boundary markers: None.\n
  • Capability inventory: Subprocess execution of ffmpeg with complex filtergraphs.\n
  • Sanitization: None.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 23, 2026, 12:56 PM