karaoke-captions
Pass
Audited by Gen Agent Trust Hub on Sep 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes system binaries
ffmpegandffprobeto perform video rendering, frame extraction, and metadata probing. This is a core part of its subtitle-burning functionality. - Evidence:
scripts/render.shexecutesffmpegfor video encoding;scripts/gen_ass.pyandscripts/match_style_from_image.pyusesubprocess.check_output()to invokeffprobefor video resolution detection. - [INDIRECT_PROMPT_INJECTION]: The skill processes external media files (video/audio) to extract transcription data, creating a potential surface for indirect injection via audio content.
- Ingestion points:
scripts/extract_words.pyingests user-provided audio/video files for transcription. - Boundary markers: No explicit instruction delimiters or boundary warnings are present in the transcription workflow.
- Capability inventory: The skill can execute shell commands via
subprocessandffmpegand perform file-write operations for subtitle and video files. - Sanitization: Data is processed through the
mlx-whispermodel and serialized via the standardjsonlibrary, reducing the risk of malicious structural injection into downstream scripts. - [EXTERNAL_DOWNLOADS]: The skill downloads pre-trained machine learning models required for transcription.
- Evidence:
scripts/extract_words.pyfetches models from themlx-communityrepository on Hugging Face (e.g.,whisper-large-v3-turbo). This targets a well-known community organization providing optimized models for Apple Silicon.
Audit Metadata