clean-cut
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process video transcripts that may contain spoken instructions from the video creator. The instructions explicitly state that these spoken cues, such as 'remove this' or 'another take', should 'outrank' the AI's judgment. This creates a scenario where untrusted content from the processed video clips can control the agent's output and file-writing behavior.
- Ingestion points: Transcripts are read from
takes-<id>.txtfiles generated by local transcription tools. - Boundary markers: The skill does not define specific delimiters to separate the raw transcribed content from the instructional analysis performed by the agent.
- Capability inventory: The agent generates the
cuts.jsonfile which controls the video rendering engine and can execute several local Python scripts. - Sanitization: There is no evidence of sanitization or filtering of the transcript text before it is analyzed for instructions.
- [COMMAND_EXECUTION]: The skill relies on the execution of multiple local scripts located in the
tools/directory, as well as system utilities likeffmpegandffprobe. It also starts a local web server for theeditor/server.pycomponent.
Audit Metadata