short-form-editing
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill leverages
ffmpegfor sophisticated video processing, including silence detection, audio denoising (afftdn), and multi-pass trimming. It also utilizesnodeto execute local logic for transcription and sentence reconstruction. - [EXTERNAL_DOWNLOADS]: The skill documents that the first execution will download the Whisper machine learning model (approximately 1.5GB) for local transcription tasks. This is standard behavior for media processing tools and is clearly disclosed.
- [DYNAMIC_EXECUTION]: The skill executes local TypeScript and CommonJS modules (
./src/lib/transcribe.tsandscripts/sentence-from-captions.cjs) using thenoderuntime to handle transcription data and redo-take detection logic. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input in the form of user-provided video files and the resulting transcripts. It includes a security best practice by requiring explicit user confirmation via a markdown table before applying any automated redo cuts, ensuring the agent does not perform destructive edits without oversight.
Audit Metadata