media-processing

Pass

Audited by Gen Agent Trust Hub on Mar 12, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill relies on external system binaries (FFmpeg and ImageMagick) to perform media processing tasks.
  • An audit of the core scripts (scripts/batch_resize.py, scripts/media_convert.py, and scripts/video_optimize.py) shows that all calls to external tools are made using subprocess.run with argument lists. This implementation is a secure coding practice that prevents shell injection attacks by ensuring that user-provided file paths or parameters are not interpreted as commands by the shell.
  • [SAFE]: The skill's components are consistent with its stated purpose and no malicious behaviors were detected.
  • Prompt Integrity: No evidence of prompt injection or attempts to override agent safety guidelines was found in SKILL.md or the reference documentation.
  • Data Privacy: There are no hardcoded credentials or suspicious network operations. The skill operates on local files provided by the user.
  • Artifact Analysis: The .coverage file located in the tests directory is a standard SQLite database generated by the Python coverage tool and contains only legitimate metadata related to the test suite execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 12, 2026, 12:04 PM