openclaw-videotranslate-skill
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: Uses FFmpeg for essential video processing tasks such as subtitle extraction and media muxing. These commands are integral to the skill's primary function and are executed within a clearly defined scope.\n- [EXTERNAL_DOWNLOADS]: Fetches source code and dependencies from GitHub and official system repositories. These downloads are part of the standard installation process for the skill and its requirements.\n- [DATA_EXFILTRATION]: Facilitates communication with OpenAI's official endpoints for translation and text-to-speech generation. This data transfer is necessary for the skill's operation and targets established, well-known service providers.\n- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection through the processing of untrusted subtitle data.\n
- Ingestion points: Reads subtitle content from provided file paths or extracted from video files.\n
- Boundary markers: Not explicitly detailed for input subtitle data passed to translation providers.\n
- Capability inventory: Includes file system access, network communication, and subprocess execution via FFmpeg.\n
- Sanitization: Documentation does not specify sanitization or validation of subtitle text before processing.
Audit Metadata