video-watcher
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
subprocess.runto invoke external binaries includingyt-dlpfor video downloads, andffmpegandffprobefor scene detection, frame extraction, and duration analysis. - [EXTERNAL_DOWNLOADS]: Fetches video media and transcript data from third-party platforms such as YouTube and Instagram, and interfaces with the DataForSEO API to retrieve subtitle information.
- [DYNAMIC_EXECUTION]: The skill includes logic in
scripts/download.pyto dynamically install theyt-dlppackage viapipif it is not found in the environment at runtime. - [INDIRECT_PROMPT_INJECTION]: The skill processes external, untrusted video content and transcripts as multimodal input for visual analysis, creating a potential surface for indirect prompt injection. Ingestion points: Video media files and transcripts retrieved from external URLs. Boundary markers: The prompt in
scripts/analyze.pyprovides a structured framework and explicit formatting instructions for the model's analysis pass. Capability inventory: The skill maintains capabilities for file system writes (Obsidian vault management) and command execution (ffmpeg, yt-dlp). Sanitization: No explicit filtering or sanitization is performed on the raw transcript text or visual frames before they are analyzed by the multimodal AI model.
Audit Metadata