raw-video-processing

Pass

Audited by Gen Agent Trust Hub on Mar 27, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes ffmpeg and ffprobe binaries through the Python subprocess module to analyze and process video files. The implementation uses argument lists (e.g., subprocess.run(cmd, ...) where cmd is a list) rather than shell strings, which effectively mitigates common shell injection vulnerabilities.
  • [COMMAND_EXECUTION]: Technical analysis shows that the scripts remove_silence.py and speed_video.py dynamically construct FFmpeg filtergraphs based on user-provided parameters like threshold and speed. While this provides a surface for complex filter injection, the parameters are handled as individual arguments in the command list, and the behavior is essential for the skill's primary function of video editing.
  • [COMMAND_EXECUTION]: The skill includes safety checks such as os.path.isfile(input_file) to verify the existence of input files before processing, and it relies on standard system tools (FFmpeg) that are expected prerequisites for video manipulation tasks.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 27, 2026, 12:17 AM