media-processing
Pass
Audited by Gen Agent Trust Hub on Feb 17, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION] (SAFE): The script
media_convert.pyuses thesubprocessmodule to execute system binaries (FFmpeg, ImageMagick). It correctly passes arguments as a list of strings and avoidsshell=True, which prevents shell injection vulnerabilities from untrusted file names or parameters. - [EXTERNAL_DOWNLOADS] (SAFE): The skill requires system-level installation of FFmpeg and ImageMagick. The documentation provides standard installation instructions using trusted system package managers (apt, brew, choco).
- [DATA_EXPOSURE] (SAFE): No evidence of hardcoded credentials, sensitive file access, or unauthorized network exfiltration was found in the script or documentation.
- [PROMPT_INJECTION] (SAFE): The instructions in
SKILL.mdand the reference documentation are purely functional and do not contain patterns designed to override agent behavior or bypass safety filters.
Audit Metadata