Security checks across malware telemetry and agentic risk
This skill is a local FFmpeg video-processing helper; its shell and file access fit that purpose, but users should watch output paths and overwrites.
Install only if you are comfortable letting the agent run local FFmpeg commands on media files you specify. Before each run, confirm the exact input files, output path, and whether overwriting is allowed; avoid processing untrusted media or subtitles without sandboxing, and do not use untrusted custom preset names or raw batch commands.
"""
try:
# 执行命令
process = subprocess.Popen(
shlex.split(command),
shell=False,
stdout=subprocess.PIPE,try:
# 执行 FFmpeg 命令
result = subprocess.run(
shlex.split(task.command), shell=False, capture_output=True, text=True, check=True
)]
try:
subprocess.run(cmd, capture_output=True, text=True, check=True)
return output_path
except subprocess.CalledProcessError as e:
raise Exception(f"烧录字幕失败: {e.stderr}")]
try:
result = subprocess.run(cmd, capture_output=True, text=True, check=True)
# 从输出中提取 VMAF 评分
for line in result.stderr.split("\n"):65/65 vendors flagged this skill as clean.