video-subtitle-cutter
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill leverages shell commands and Python's subprocess module to orchestrate video processing tasks with FFmpeg and Whisper. This is the primary functionality and is implemented transparently.
- [EXTERNAL_DOWNLOADS]: The skill fetches transcription data from the official OpenAI API and directs users to install standard packages from trusted repositories such as Homebrew and PyPI.
- [INDIRECT_PROMPT_INJECTION]: The skill processes video transcripts, which are untrusted external data, through an LLM to identify segments for removal. While this presents an ingestion surface, the risk is minimal as the output is restricted to media timestamps.
- [PRIVILEGE_ESCALATION]: The prerequisites section contains standard instructions for Linux users to install FFmpeg using sudo, which is expected for system package management.
Audit Metadata