jianying-use
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
jianyingRust CLI for core functionality, invoking commands such asjianying doctor,jianying capabilities, andjianying job runto manage video editing projects. - [INDIRECT_PROMPT_INJECTION]: The skill provides a surface for indirect prompt injection by ingesting and processing external media assets and JianYing draft files.
- Ingestion points: Untrusted data is ingested from absolute media paths, draft folders, and media facts probed via the
media probecommand. - Boundary markers: The skill implements boundary controls by requiring the creation of isolated copies for any write operations (Rule 3) and using
project verifyfor structural integrity checks. - Capability inventory: Available capabilities include file system access (read/write), metadata probing, and video rendering through the external CLI.
- Sanitization: Input data is subjected to structural validation against the
jianying-job/v2schema, though the skill depends on the underlying CLI to handle malformed binary content in media files. - [EXTERNAL_DOWNLOADS]: The skill instructs the agent to download and install additional skill modules from the vendor's repository using the
npx skills add full-aigc-skills/jianying-skillscommand.
Audit Metadata