x-post-extractor
Pass
Audited by Gen Agent Trust Hub on Mar 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands to process media and manage files.\n
- Runs
mkdir -p x_posts_outputto create directories (SKILL.md).\n - Executes
ffmpegwith variable parameters (-ss <start_time>,-i "<video_file>",-t <duration>) extracted from the transcription (SKILL.md).\n - Calls internal Python scripts (
parse_transcription.py,capture_screenshot.py,fetch_logos.py) passing arguments derived from transcript content (SKILL.md).\n- [EXTERNAL_DOWNLOADS]: The skill facilitates automated network requests to external sources.\n - Uses
capture_screenshot.pyto visit and screenshot URLs mentioned in the transcript (SKILL.md).\n - Uses
fetch_logos.pyto download company logos based on domains extracted from the transcript (SKILL.md).\n- [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection due to how it processes external data.\n - Ingestion points: Reads and parses
parsed.jsonorout.jsontranscription files which contain untrusted content (SKILL.md).\n - Boundary markers: No explicit delimiters or instructions are used to distinguish between data and potential commands within the transcript (SKILL.md).\n
- Capability inventory: Possesses the ability to execute shell commands (
ffmpeg,mkdir) and run Python scripts with arguments (SKILL.md).\n - Sanitization: The instructions do not specify any sanitization or validation for timestamps, URLs, or domains extracted from the transcript before they are used in shell commands (SKILL.md).
Audit Metadata