preprep
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.runto invoke external utilities for its primary functionality. - It calls
ffmpegandffprobeinlane_speech_coach.pyfor audio analysis of rehearsal recordings. - it calls
whisper-clifor speech-to-text transcription. - It calls
nodeandchrome(in headless mode) indiagram_from_json.pyto render JSON-based diagrams into PNG files. - These calls use constructed argument lists and target local files within the project structure.
- [DYNAMIC_EXECUTION]: The tool employs dynamic loading of Python modules to handle project-specific logic and modular check "lanes".
- In
preprep.py, it usesimportlib.utilto load synchronization scripts (e.g.,ifkakao_pull_notes.py) and several standalone lane modules. - This execution is constrained to the project's own directory or paths specified in the local
surfaces.yamlconfiguration. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted data from user-supplied manuscripts and slide files, creating a potential surface for indirect injection.
- Ingestion points: Markdown manuscripts, PowerPoint (.pptx) notes, and JSON diagram specifications are read from the local file system (e.g., in
preprep.pyandlane_speech_coach.py). - Boundary markers: The skill uses specific Korean markers like
🖥(screen text) and🗣(speech text) to delimit different sections within manuscript files. - Capability inventory: The skill possesses capabilities for file system operations (
os.replaceinsafe_install.py) and local command execution as noted above. - Sanitization: Content is structurally parsed using regex and XML trees to isolate text before it is presented to the agent or processed by specialized lanes.
Audit Metadata