video-frames
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/frame.shexecutes theffmpegutility to perform video frame extraction. It uses variables derived from command-line arguments to specify the input file, output path, and frame selection parameters. - [EXTERNAL_DOWNLOADS]: The skill's metadata in
SKILL.mdidentifiesffmpegas a dependency and provides installation instructions using the Homebrew (brew) package manager, which is a well-known and trusted service. - [PROMPT_INJECTION]: The skill processes external data (video files and parameters) which constitutes an indirect injection surface.
- Ingestion points: The
scripts/frame.shscript accepts file paths and selection parameters (--time,--index) as inputs from the agent's context. - Boundary markers: No specific delimiters or instructions are used within the script to separate data from commands.
- Capability inventory: The skill performs subprocess execution of the
ffmpegbinary which has extensive capabilities for file and network access. - Sanitization: The script checks for the existence of the input file but does not perform validation or sanitization on the selection parameters before they are passed to the
ffmpegcommand or filtergraph.
Audit Metadata