video-understand
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes video transcripts which could contain adversarial instructions designed to influence the agent's behavior.
- Ingestion points: Video transcripts read from
transcript.jsoninSKILL.md(Step 3). - Boundary markers: None specific; the model is instructed to synthesize the content rather than use delimiters.
- Capability inventory: Execution of
ffmpeg,ffprobe, andyt-dlpviasubprocessinscripts/frames.pyandscripts/transcript.py. - Sanitization: No sanitization of transcript text is performed before it is processed by the model.
- [COMMAND_EXECUTION]: The skill invokes external command-line utilities (
ffmpeg,ffprobe,yt-dlp) using thesubprocessmodule. These calls use argument lists rather than shell strings, which is a recommended practice to mitigate shell injection risks.
Audit Metadata