video-edit
Warn
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: MEDIUMREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The script
scripts/jump_cut_vad_singlepass.pyusestorch.hub.loadwithtrust_repo=Trueto download and execute code and models from thesnakers4/silero-vadrepository on GitHub at runtime. - [COMMAND_EXECUTION]: Several scripts, including
auto_captions.py,compress_video.py,insert_3d_transition.py,jump_cut_vad_singlepass.py,simple_video_edit.py,vertical_crop.py, andyoutube_clip.py, usesubprocess.runto execute shell commands such asffmpeg,ffprobe,yt-dlp, andnpx. While these are standard for video processing, they involve executing commands with inputs derived from file paths and user-provided metadata. - [EXTERNAL_DOWNLOADS]: The
scripts/youtube_clip.pyscript downloads video content from YouTube, a well-known service, using theyt-dlptool. Additionally,insert_3d_transition.pyrequires runningnpm installto fetch dependencies for the Remotion rendering engine. - [DATA_EXFILTRATION]: The
scripts/simple_video_edit.pyscript is designed to upload processed video files and generated metadata to the Auphonic web service, which is the intended functionality of the skill's upload feature. - [INDIRECT_PROMPT_INJECTION]: The skill generates video transcripts from untrusted external sources and interpolates them into prompts for the Anthropic Claude API in
simple_video_edit.pyandyoutube_clip.pyto generate summaries and chapters. - Ingestion points: Video transcripts generated via the Whisper model from potentially untrusted video files or YouTube downloads in
scripts/simple_video_edit.pyandscripts/youtube_clip.py. - Boundary markers: The prompts do not use explicit delimiters or "ignore instructions" warnings to isolate the transcript content from the system instructions.
- Capability inventory: The skill has capabilities for file system access, network communication (API uploads), and shell command execution.
- Sanitization: There is no evidence of sanitization or escaping of the transcript text before it is inserted into the LLM prompt template.
- [DYNAMIC_EXECUTION]: The
scripts/insert_3d_transition.pyscript usesnpx remotion renderto execute JavaScript-based rendering logic, andjump_cut_vad_singlepass.pydynamically loads Silero VAD code using Torch Hub.
Audit Metadata