ffmpeg Audit-Bericht.

Warnungen

• Permission surface may require sandboxing
• SKILL.md does not include a prerequisites section stating that ffmpeg and ffprobe must be installed, so agents may fail with confusing 'command not found' errors.
• No security guidance is provided about quoting/escaping user-controlled filenames or treating media inputs as untrusted, which is important when an LLM generates shell commands.
• The skill does not mention output overwrite behavior; depending on environment, ffmpeg may prompt or overwrite files, and agents should explicitly use -n or -y as appropriate.
• Permission surface needs review: shell or command execution, filesystem or document access
• Permission surface: shell or command execution, filesystem or document access

Methode

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.