wjs-editing-multicam
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches and installs the polysync Python package from the official package registry. This is a resource owned by the vendor jianshuo.
- [COMMAND_EXECUTION]: Utilizes shell commands to install software and run the polysync CLI for video alignment and rendering. These are standard operations for the skill's intended purpose.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from .sync.json and edl.json files to determine video cuts. 1. Ingestion points: Reads edl.json, sync.json, and video metadata from the local directory. 2. Boundary markers: None identified. 3. Capability inventory: Execution of CLI tools and file system manipulation. 4. Sanitization: Relies on the structured nature of the JSON input files used by the polysync tool.
Audit Metadata