comic-drama-master
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
ffmpegandffprobeutilities for video merging and duration detection. These commands are executed via Python'ssubprocess.runwith arguments constructed from internally managed task structures, minimizing the risk of arbitrary command injection. - [EXTERNAL_DOWNLOADS]: Instructions are provided to install
ffmpegvia standard package managers (brew,apt,yum).ffmpegis a well-known, trusted, and widely used open-source tool for multimedia processing. - [PROMPT_INJECTION]: The skill includes a 'Content Safety Audit' section that instructs the agent to identify and rephrase sensitive content (e.g., replacing 'blood' with 'spiritual energy') before submitting prompts to the generation API. This is a functional requirement to prevent task failure due to external API content filters and does not constitute a malicious attempt to bypass the agent's own safety guardrails.
- [DATA_EXFILTRATION]: Network operations are directed towards official Volcengine domains (
*.volces.comand*.volcengineapi.com) for image/video generation, search, and storage. These actions are transparently documented and align with the primary purpose of the skill and the author's identity (Bytedance).
Audit Metadata