video-edit
Fail
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The installation instructions for Ubuntu/Debian include the use of sudo to update package lists and install ffmpeg, which grants administrative access on the host system.
- [COMMAND_EXECUTION]: The skill relies on direct execution of powerful CLI tools such as ffmpeg and ffprobe, as well as shell-specific commands like printf with redirection, enabling broad filesystem operations.
- [INDIRECT_PROMPT_INJECTION]: The skill instructions provide an attack surface where untrusted data, such as user-provided filenames or filter strings, are interpolated directly into shell commands. Ingestion points: Video/audio filenames and filter parameters in SKILL.md and references/operations.md; Boundary markers: Absent; Capability inventory: Shell access to execute ffmpeg, ffprobe, printf, and rm; Sanitization: No sanitization or validation of external content is specified.
Recommendations
- AI detected serious security threats
Audit Metadata