video-walkthrough
Pass
Audited by Gen Agent Trust Hub on Aug 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes multiple shell commands to manage environment setup and media processing.
- Runs
npm installandnpx playwright install chromiumfor environment setup. - Executes
python3to run local scriptslib/narrate.pyandlib/add-accent.pyfor audio synthesis and dictionary management. - Uses
ffmpegfor audio/video muxing. - [EXTERNAL_DOWNLOADS]: The skill initiates several external downloads for dependencies and assets.
- Installs Python packages:
torch,omegaconf,numpy,ruaccent,transformers,num2words, andrunorm. - Downloads Chromium browser binaries via Playwright.
- Downloads AI models for the Silero TTS engine into a local cache.
- References and provides commands to download a large Russian word database from a third-party repository (
danakt/russian-words). - Connects to an unofficial Microsoft Edge API for high-quality voice synthesis.
- [REMOTE_CODE_EXECUTION]: The skill generates and executes executable scripts locally.
- Translates Gherkin
.featurefiles into executable Playwright.spec.tsfiles and runs them vianpm testornpm run video. - Executes local Python scripts (
lib/narrate.py) that perform file operations and audio processing. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect injection surface by processing external data.
- Ingestion points: Processes Gherkin (
.feature) files to define test logic. - Boundary markers: None explicitly mentioned to separate untrusted Gherkin content from the generation process.
- Capability inventory: Writing and executing
.spec.tsfiles, executing shell commands for video/audio processing, and performing network operations for TTS. - Sanitization: No evidence of sanitization or validation of the Gherkin steps before they are used to generate Playwright scripts.
Audit Metadata