karaoke-video
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses Demucs to separate audio stems, which downloads pre-trained models from the trusted Facebook Research repository.
- [COMMAND_EXECUTION]: Orchestrates media processing via shell commands (ffmpeg, demucs, whisper-cli). It correctly escapes paths and uses temporary directories for intermediate files.
- [PROMPT_INJECTION]:
- Ingestion points: Reads user-provided audio, video, and subtitle files.
- Boundary markers: No explicit boundaries are used for subtitle content.
- Capability inventory: Uses shell command execution and file system access.
- Sanitization: Escapes file paths used in FFmpeg filter strings.
Audit Metadata