short-form-cut-finder
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze long transcripts provided by users, which could contain hidden malicious instructions intended to subvert the agent's behavior.
- Ingestion points: Long-form transcripts pasted by the user for clip mining (SKILL.md).
- Boundary markers: The instructions do not define delimiters or specific warnings for the agent to ignore instructions embedded within the transcript data.
- Capability inventory: The skill uses the
Bashtool and has file system access viaRead,Write, andEdit(SKILL.md). - Sanitization: No sanitization or escaping of the input transcript is mentioned before the agent processes and extracts content.
- [COMMAND_EXECUTION]: The skill workflow relies on the
Bashtool and references a setup process involving aninstall.shscript and a cloned repository (video-editing-suite). These tools facilitate system-level command execution to manage configurations and run external utilities likegenerate_clips.
Audit Metadata