adobe-edit-quick-cut
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill interpolates user-provided descriptions directly into the
user_promptparameter for thevideo_create_quick_cuttool in Step 3. - Ingestion points: User-supplied video descriptions and intent instructions in the original request.
- Boundary markers: Absent; the skill appends generic framing instructions to the user's input without explicit delimiters.
- Capability inventory: File writing via
curl -oin the fallback flow, network egress for file uploads/downloads, and execution of Adobe video processing tools. - Sanitization: No explicit sanitization or filtering of the user's input is mentioned before interpolation.
- [COMMAND_EXECUTION]: The workflow for Step 5 (No-widget fallback) includes a command to download the processed video using
curl -L -o highlight_cut.mp4. This is a functional requirement for environments that do not support theasset_preview_filewidget. - [EXTERNAL_DOWNLOADS]: The skill facilitates the retrieval of video files from transient presigned URLs generated by Adobe's video processing services. These downloads represent the intended output of the skill's primary function.
Audit Metadata