ffmpeg-video-editor

• Outcome: Pass
• Latest audit: May 27, 2026, 10:48 PM
• Version:
  1.0.0

Overview

This skill is a straightforward FFmpeg command generator, with the main practical risk that its suggested commands overwrite output files by default.

Before running generated commands, verify the input and output filenames and remove `-y` if you do not want existing files overwritten. Install FFmpeg from a trusted source; this skill does not install it for you.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Excessive Agency: Unrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

• Confidence: 97% confidence
• Finding: The skill explicitly instructs the agent to always include `-y`, which forces FFmpeg to overwrite existing output files without prompting. In a command-generation skill, this can cause silent data loss if the suggested or assumed output filename already exists, especially because the skill also auto-generates output names when the user does not specify one.

VirusTotal

55/55 vendors flagged this skill as clean.