mkv-set-default-track
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on local execution of the
mkvtoolnixsuite (specificallymkvpropeditandmkvmerge) to modify Matroska file metadata in-place. - [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection (command injection) because user-supplied input is interpolated into shell commands.
- Ingestion points: User-provided inputs for the
$FILE(file path) and$TRACK_INDEXvariables inSKILL.md. - Boundary markers: None present; the skill lacks delimiters or warnings to ignore embedded instructions in the file paths.
- Capability inventory: The skill has access to
Bash,mkvpropedit,mkvmerge,cp,rm, andlsas defined in theallowed-toolssection. - Sanitization: No explicit sanitization or validation of input variables is performed before they are used in shell commands, relying entirely on the agent's internal handling.
Audit Metadata