video-understand
Pass
Audited by Gen Agent Trust Hub on Sep 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/understand_video.pyusessubprocess.runto executeffmpegandffprobefor frame extraction and video metadata retrieval. The commands are passed as lists of arguments, which is a secure practice to prevent shell command injection. - [EXTERNAL_DOWNLOADS]: The skill offers to install the
openai-whisperPython package from the official Python Package Index (PyPI) if it is not already present on the system. This installation only occurs after an interactive user confirmation. - [INDIRECT_PROMPT_INJECTION]: The skill extracts text transcripts from video files. This creates an indirect prompt injection surface if the video contains adversarial spoken content intended to influence the behavior of the agent that processes the resulting transcript.
- Ingestion points: Video file input processed in
scripts/understand_video.py. - Boundary markers: None identified in the prompt interpolation logic.
- Capability inventory: Local file system writes, execution of system binaries (
ffmpeg,ffprobe), and package installation viapip. - Sanitization: No sanitization or filtering is performed on the extracted transcription text before it is returned in the JSON result.
Audit Metadata