media-processing
Pass
Audited by Gen Agent Trust Hub on Mar 12, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on external system binaries (FFmpeg and ImageMagick) to perform media processing tasks.
- An audit of the core scripts (
scripts/batch_resize.py,scripts/media_convert.py, andscripts/video_optimize.py) shows that all calls to external tools are made usingsubprocess.runwith argument lists. This implementation is a secure coding practice that prevents shell injection attacks by ensuring that user-provided file paths or parameters are not interpreted as commands by the shell. - [SAFE]: The skill's components are consistent with its stated purpose and no malicious behaviors were detected.
- Prompt Integrity: No evidence of prompt injection or attempts to override agent safety guidelines was found in
SKILL.mdor the reference documentation. - Data Privacy: There are no hardcoded credentials or suspicious network operations. The skill operates on local files provided by the user.
- Artifact Analysis: The
.coveragefile located in the tests directory is a standard SQLite database generated by the Python coverage tool and contains only legitimate metadata related to the test suite execution.
Audit Metadata