render-proof-points-overlay
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The
scripts/fetch_icons.pyscript downloads PNG icons from JSDelivr (cdn.jsdelivr.net), a well-known and trusted CDN for serving open-source assets. These icons are used as static graphic elements for the video overlays. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from a
config.jsonfile which defines overlay text and layout parameters. This data is rendered into images and used in FFmpeg filter strings, representing an attack surface for influencing video output. - Ingestion points:
config.json(specifically theoverlaysandlayoutkeys) processed inscripts/build_overlays.pyandscripts/compose_master.py. - Boundary markers: Absent; text content is rendered directly into overlay images without delimiters.
- Capability inventory: File system access (read/write), subprocess execution of FFmpeg and FFprobe.
- Sanitization:
scripts/build_overlays.pyincludes validation to ensure that the overlay copy provided in the configuration is not empty. - [COMMAND_EXECUTION]: The skill uses
subprocess.runto execute FFmpeg and FFprobe for video compositing, audio analysis, and metadata verification. While the commands themselves are executed using list-based arguments (a safe practice), the complex filter strings are constructed using configuration values via string interpolation.
Audit Metadata