chengfeng-cut
Pass
Audited by Gen Agent Trust Hub on Aug 6, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes local Node.js scripts (videocut-cli.cjs, ensure-running.cjs) to manage the video project lifecycle. These operations are restricted to a defined plugin directory and interact with a local service on port 5190 for project state management.\n- [EXTERNAL_DOWNLOADS]: Transcripts are generated using cloud-based ASR adapters. The instructions explicitly mandate the use of platform-approved cloud services and prohibit the execution of unverified local models to ensure data processing integrity.\n- [PROMPT_INJECTION]: The skill uses clear, prescriptive instructions to define its operational boundaries. It includes a detailed section documenting past errors (lessons.md) to prevent the agent from repeating logic failures and strictly forbids destructive actions like physical file deletion without user oversight.\n- [SAFE]: The skill follows a human-in-the-loop design where automated editing proposals must be reviewed in a dedicated graphical interface (Studio) before finalization. It implements revision-based checks to prevent race conditions and unauthorized project modifications.
Audit Metadata