raw-video-editor
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted external data which creates an indirect prompt injection surface.\n
- Ingestion points: Raw video files (
SRC), reference video URLs, and B-roll folders.\n - Boundary markers: Absent; the skill lacks explicit instructions to ignore embedded commands in media content.\n
- Capability inventory: Extensive file system access, execution of
ffmpegwith complex filter graphs, and network access viayt-dlp.\n - Sanitization: File integrity is validated via SHA-256, but the content being transcribed and analyzed is not sanitized for malicious instructions.\n- [DYNAMIC_EXECUTION]: The skill utilizes
awkto dynamically assembleffmpegfilter graph scripts at runtime based on segment timings. This programmatic generation of command logic adds complexity to the execution environment. Found inffmpeg-recipes.md.\n- [REMOTE_CODE_EXECUTION]: The skill invokesnpx -y hyperframesto download and execute the HyperFrames CLI from the NPM registry. It also usesyt-dlpto download content from user-provided URLs for analysis. Found inSKILL.mdandstyle-decode.md.\n- [EXTERNAL_DOWNLOADS]: The skill downloads reference videos, B-roll assets, and music from external sources such as YouTube, Pexels, and Pixabay. These downloads are documented for attribution but originate from external infrastructure.
Audit Metadata