Scan Report
5 /100
ffmpeg-master-pro
FFmpeg Master Pro - 全能视频处理技能，支持视频转换、压缩、编辑等功能
This is a legitimate FFmpeg video processing skill with no malicious behavior detected. All subprocess usage is for documented FFmpeg/FFprobe operations with shell=False, no network exfiltration, no credential theft, and no obfuscation techniques found.
Safe to install
This skill is safe to use. No security concerns identified.
| Resource | Declared | Inferred | Status | Evidence |
|---|---|---|---|---|
| Filesystem | READ | READ | ✓ Aligned | Reads video files via ffprobe for analysis, declared in SKILL.md |
| Network | NONE | NONE | — | No network requests found in codebase |
| Shell | WRITE | WRITE | ✓ Aligned | Subprocess calls to ffmpeg/ffprobe for video processing, declared in SKILL.md |
| Environment | NONE | NONE | — | No environment variable access for credentials detected |
| Skill Invoke | NONE | NONE | — | No skill invocation patterns found |
| Clipboard | NONE | NONE | — | No clipboard access detected |
| Browser | NONE | NONE | — | No browser automation detected |
| Database | NONE | NONE | — | No database access detected |
1 findings
Medium External URL 外部 URL
https://ffmpeg.org SKILL.md:8 File Tree
55 files · 478.1 KB · 16589 lines Python 37f · 10542L
Markdown 9f · 5687L
JSON 9f · 360L
├─
▾
assets
│ └─
▾
presets
│ ├─
archival.json
JSON
│ ├─
bilibili.json
JSON
│ ├─
douyin.json
JSON
│ ├─
preview.json
JSON
│ ├─
social_media.json
JSON
│ ├─
web_optimized.json
JSON
│ ├─
wechat.json
JSON
│ └─
youtube.json
JSON
├─
▾
references
│ ├─
api_reference.md
Markdown
│ ├─
best_practices.md
Markdown
│ ├─
detailed_workflows.md
Markdown
│ ├─
keyframe_analysis.md
Markdown
│ ├─
optimization_guide.md
Markdown
│ ├─
quickstart.md
Markdown
│ ├─
smart_cut_guide.md
Markdown
│ └─
troubleshooting.md
Markdown
├─
▾
scripts
│ ├─
▾
analyzers
│ │ ├─
▾
video_analyzer
│ │ │ ├─
__init__.py
Python
│ │ │ └─
video_analyzer.py
Python
│ │ ├─
__init__.py
Python
│ │ ├─
bitrate_calculator.py
Python
│ │ ├─
keyframe_analyzer.py
Python
│ │ └─
video_type_analyzer.py
Python
│ ├─
▾
builders
│ │ ├─
__init__.py
Python
│ │ └─
ffmpeg_builder.py
Python
│ ├─
▾
core
│ │ ├─
__init__.py
Python
│ │ ├─
decision_engine.py
Python
│ │ ├─
gpu_detector_module.py
Python
│ │ ├─
gpu_detector.py
Python
│ │ └─
nlu_engine.py
Python
│ ├─
▾
detectors
│ │ └─
▾
content_detector
│ │ ├─
__init__.py
Python
│ │ └─
content_detector.py
Python
│ ├─
▾
encoders
│ │ ├─
__init__.py
Python
│ │ ├─
adaptive_bitrate.py
Python
│ │ ├─
param_optimizer.py
Python
│ │ ├─
quality_aware_compressor.py
Python
│ │ └─
two_pass_encoder.py
Python
│ ├─
▾
optimizers
│ │ └─
▾
encoder_optimizer
│ │ ├─
__init__.py
Python
│ │ └─
encoder_optimizer.py
Python
│ ├─
▾
processors
│ │ ├─
__init__.py
Python
│ │ ├─
batch_processor.py
Python
│ │ ├─
optimized_batch.py
Python
│ │ ├─
retry_handler.py
Python
│ │ ├─
smart_skipper.py
Python
│ │ └─
subtitle_processor.py
Python
│ ├─
▾
progress
│ │ ├─
__init__.py
Python
│ │ ├─
progress_display.py
Python
│ │ └─
progress_tracker.py
Python
│ ├─
▾
utils
│ │ ├─
__init__.py
Python
│ │ ├─
batch_reporter.py
Python
│ │ └─
preset_manager.py
Python
│ ├─
▾
validators
│ │ ├─
__init__.py
Python
│ │ └─
quality_validator.py
Python
│ └─
__init__.py
Python
├─
_meta.json
JSON
└─
SKILL.md
Markdown
Security Positives
✓ All subprocess calls use shell=False with hardcoded command arrays - no command injection vectors
✓ No network requests (urllib, requests, http.client) found in any file
✓ No credential harvesting patterns (os.environ with API keys, .env files)
✓ No obfuscation techniques (eval, exec, base64, atob) detected
✓ No sensitive file access (~/.ssh, ~/.aws, ~/.gcloud) found
✓ No remote code execution patterns (curl|wget|bash pipes)
✓ No hidden instructions in HTML comments
✓ SKILL.md accurately documents the tool's FFmpeg-based functionality
✓ Comprehensive error handling with proper exception management
✓ All file I/O is for legitimate video processing workflows