render-hook-replacement
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill performs localized video editing tasks using standard system tools like FFmpeg and FFprobe. All file operations are directed to local paths specified in the configuration.\n- [SAFE]: Robust integrity verification is implemented in
scripts/replace_hook.py. It uses PSNR (Peak Signal-to-Noise Ratio) to ensure retained video frames are identical within encoding tolerances and measures audio correlation to prevent unintended changes to the sound track.\n- [SAFE]: Input validation is thorough throughout the scripts. Numerical inputs (timestamps) are checked for validity and positivity, and color codes are validated using regular expressions. Thepreflight_sourcefunction verifies the integrity and format of the source video before any processing begins.\n- [COMMAND_EXECUTION]: The skill utilizessubprocess.runto invokeffmpegandffprobefor media processing. These calls are constructed as lists (avoiding shell execution) and use paths validated through theresolveutility function.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted media and metadata. Evidence chain:\n - Ingestion points: Reads
config.json, source video files,wordsJSON, and SRT/JSON captions inscripts/replace_hook.py.\n - Boundary markers:
SKILL.mdmandates manual review ('needs_review' status) and examination of preservation booleans in the manifest.\n - Capability inventory: File read/write and
subprocess.runfor media tools inscripts/replace_hook.py.\n - Sanitization: Includes strict schema validation, path resolution via
resolve(), and high-tolerance decoded frame comparisons to verify the body was not altered.
Audit Metadata