Skill audit report

ffmpeg Audit report.

Video and audio processing with FFmpeg. Use for format conversion, resizing, compression, audio extraction, and preparing assets for Remotion. Triggers include converting GIF to MP4, resizing video, extracting audio, compressing files, or any media transformation task.

EXPERIMENTAL · REVIEWNeeds reviewGenerated Oct 21, 2026Heuristic metadata audit
82
Audit
72
Trust
90
Quality
76
Security
88
Maintain
92
Install

OpenAgentSkill Trust Score

72
Strong shortlist

OpenAgentSkill Trust Score

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

GitHub adoption

PASS

100

56K GitHub stars

Stars/forks activity

PASS

100

56K stars, 6.9K forks; issue activity unavailable in current metadata

Recent maintenance

PASS

88

2mo since push

License clarity

PASS

86

AGPL-3.0

README/SKILL.md completeness

INFO

76

Public metadata needs stronger README/SKILL.md context

Dependency/runtime risk

INFO

64

command execution surface, network or browser surface

Install availability

PASS

92

npx skills add calesthio/OpenMontage --skill ffmpeg

Install command safety

PASS

92

standard package or runtime install path

Permission surface

WARN

48

shell or command execution, filesystem or document access

Repository evidence

PASS

86

https://github.com/calesthio/OpenMontage/tree/main/.agents/skills/ffmpeg

Review status

INFO

66

AI review data available

Agent Proven outcomes

INFO

54

No agent outcome data yet

Checks

Install and adoption review

8 Passed · 9 Needs review

Install path

92

PASS

npx skills add calesthio/OpenMontage --skill ffmpeg

Repository

88

PASS

https://github.com/calesthio/OpenMontage/tree/main/.agents/skills/ffmpeg

License

86

PASS

AGPL-3.0

Maintenance

88

PASS

2mo since push

AI review

55

CHECK

SKILL.md does not include a prerequisites section stating that ffmpeg and ffprobe must be installed, so agents may fail with confusing 'command not found' errors.

README/SKILL.md completeness

84

PASS

Usable description available

Dependency risk

64

CHECK

command execution surface, network or browser surface

Install command safety

92

PASS

standard package or runtime install path

Permission surface

48

FIX

shell or command execution, filesystem or document access

Stars/forks activity

100

PASS

56K stars, 6.9K forks; issue activity unavailable in current metadata

Adoption

88

PASS

56K GitHub stars

Warnings

  • Permission surface may require sandboxing
  • SKILL.md does not include a prerequisites section stating that ffmpeg and ffprobe must be installed, so agents may fail with confusing 'command not found' errors.
  • No security guidance is provided about quoting/escaping user-controlled filenames or treating media inputs as untrusted, which is important when an LLM generates shell commands.
  • The skill does not mention output overwrite behavior; depending on environment, ffmpeg may prompt or overwrite files, and agents should explicitly use -n or -y as appropriate.
  • Permission surface needs review: shell or command execution, filesystem or document access
  • Permission surface: shell or command execution, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Compare nearby options

Related skills to audit next