reel-machine
Pass
Audited by Gen Agent Trust Hub on Oct 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The
scripts/caption_review.pyscript constructs an LLM prompt that includes the full transcript of processed video clips to perform a secondary review of captions. If a video contains spoken text designed as a prompt injection, it could influence the output of the review model. - Ingestion points:
scripts/caption_review.pyreads transcript data fromtranscript.json(generated bytranscribe.pyusing ElevenLabs Scribe). - Boundary markers: The transcript is interpolated into the prompt string without explicit delimiters or warnings to the model to ignore instructions within the transcript text.
- Capability inventory: The review script can execute arbitrary shell commands defined in
REEL_REVIEW_CMD, and the overall skill has capabilities for file writing, network operations, and remote server access. - Sanitization: The transcript text is included in the prompt without sanitization or escaping.
- [COMMAND_EXECUTION]: The skill allows for the execution of user-defined shell commands for uploading files and reviewing content.
scripts/schedule_reel.pyexecutes theREEL_UPLOAD_CMDfrom the environment/config usingsubprocess.run(shell=True). While it usesshlex.quotefor the file argument, the command itself is dynamically loaded.scripts/caption_review.pyexecutes theREEL_REVIEW_CMDusingshlex.split, allowing users to hook in their preferred CLI-based LLM for content validation.- [REMOTE_CODE_EXECUTION]: The
scripts/remote_render.shscript facilitates remote rendering by transferring a bundle (including scripts and a generatedjob.sh) to a user-defined SSH host and executing it. This is a core feature for offloading heavy video processing but represents a remote execution capability. - [EXTERNAL_DOWNLOADS]: Several scripts perform network requests to fetch resources:
scripts/setup.shdownloads the 'Funnel Display' font from Google's official fonts repository on GitHub.scripts/logo_png.pyfetches SVG icons from the Simple Icons project via the jsDelivr CDN.scripts/commons.pydownloads images from Wikimedia Commons using their official API.scripts/transcribe.pyuploads audio to the ElevenLabs Scribe API.scripts/schedule_reel.pyinteracts with the Buffer GraphQL API to schedule posts.
Audit Metadata