video-edit
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFECOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides templates for executing various shell commands including
ffmpeg,ffprobe,printf, andrmto perform video editing tasks.- [PRIVILEGE_ESCALATION]: TheSKILL.mdfile includes setup instructions for Ubuntu/Debian that usesudo apt installto installffmpeg. This is a standard installation procedure for this well-known package.- [INDIRECT_PROMPT_INJECTION]: The skill instructions process user-provided files and metadata, creating a surface for indirect prompt injection attacks. - Ingestion points: External filenames and file contents are processed by
ffmpegandffprobeacrossSKILL.mdandreferences/operations.md. - Boundary markers: Absent. The instructions do not provide delimiters or warnings to ignore instructions that might be embedded in file metadata or names.
- Capability inventory: The skill utilizes shell subprocesses to run
ffmpeg,ffprobe,printf, andrm, providing a range of file manipulation and metadata extraction capabilities. - Sanitization: Absent. The command templates, such as the
printfcommand for concatenation, do not include logic to escape or validate user-supplied filenames, and the use of the-safe 0flag inffmpegexplicitly allows processing of absolute file paths.
Audit Metadata