batch-processor
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill orchestrates multiple shell commands including directory creation, navigation, and execution of Python scripts and CLI tools. It relies on user-defined shell aliases to perform video downloads and transcriptions. The
list_channel_videos.pyscript uses thesubprocessmodule to callyt-dlpusing an argument list, which is a standard method for executing external processes.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from an external source (YouTube video metadata) which is then used to drive agent actions and shell commands.\n - Ingestion points: The
list_channel_videos.pyscript fetches video titles, IDs, and URLs from a specified YouTube channel.\n - Boundary markers: The
SKILL.mdfile provides a structured 'Execution Checklist' that guides the agent through the process, separating the parsing of external data from the execution of processing steps.\n - Capability inventory: The skill has the capability to execute shell commands, manage files and directories, and call external CLI tools for media processing.\n
- Sanitization: The instructions include a mandatory sanitization routine for video titles (replacing illegal characters, removing non-alphanumeric characters, and truncating) before the titles are used in directory creation or file paths.
Audit Metadata