video-edit
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on direct local shell execution of
ffmpegandffprobecommands. - [PRIVILEGE_ESCALATION]: The installation instructions for Debian/Ubuntu systems in
SKILL.mdinclude the use ofsudoto install theffmpegpackage. - [INDIRECT_PROMPT_INJECTION]: The skill contains a vulnerability surface in its video concatenation feature which uses the
-safe 0flag. This configuration allows the processing of files using absolute paths, which could be misused if the tool processes untrusted filenames. - Ingestion points: External video files and user-supplied file lists in
SKILL.mdandreferences/operations.md. - Boundary markers: Absent.
- Capability inventory: Execution of
ffmpeg,ffprobe,printf, andrmcommands. - Sanitization: None present.
Audit Metadata