jianying-draft-subtitles
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from external subtitle files (SRT and ASS) as part of its core functionality described in
SKILL.mdandreferences/workflow.md. This represents a potential surface for indirect prompt injection. - Ingestion points: Subtitle imports via
jianying captions import-srtandimport-asscommands. - Boundary markers: The skill uses structural validation for timing and overlaps, but does not explicitly instruct the agent to ignore or sanitize natural language instructions embedded within the subtitle text.
- Capability inventory: The agent has access to the
jianyingCLI, which can modify, style, and export project data. - Sanitization: Validation is present for structural integrity (e.g., negative time, overlaps), but lacks specific sanitization for prompt-based content within the text payload.
- [EXTERNAL_DOWNLOADS]: The workflow documentation in
references/workflow.mdsuggests installing a complementary skill using thenpx skills add full-aigc-skills/jianying-skillscommand. This resource is provided by the same author as the current skill and is intended for speech-to-text functionality. - [COMMAND_EXECUTION]: The skill operates by executing the
jianyingRust CLI tool for subtitle management tasks, including listing, importing, editing, styling, and exporting, as detailed inreferences/workflow.md.
Audit Metadata