video-edit

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides templates for executing various shell commands including ffmpeg, ffprobe, printf, and rm to perform video editing tasks.- [PRIVILEGE_ESCALATION]: The SKILL.md file includes setup instructions for Ubuntu/Debian that use sudo apt install to install ffmpeg. This is a standard installation procedure for this well-known package.- [INDIRECT_PROMPT_INJECTION]: The skill instructions process user-provided files and metadata, creating a surface for indirect prompt injection attacks.
  • Ingestion points: External filenames and file contents are processed by ffmpeg and ffprobe across SKILL.md and references/operations.md.
  • Boundary markers: Absent. The instructions do not provide delimiters or warnings to ignore instructions that might be embedded in file metadata or names.
  • Capability inventory: The skill utilizes shell subprocesses to run ffmpeg, ffprobe, printf, and rm, providing a range of file manipulation and metadata extraction capabilities.
  • Sanitization: Absent. The command templates, such as the printf command for concatenation, do not include logic to escape or validate user-supplied filenames, and the use of the -safe 0 flag in ffmpeg explicitly allows processing of absolute file paths.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 06:26 AM