wjs-localizing-video
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for the agent to download a static build of
ffmpegfromevermeet.cx(a well-known source for macOS binaries) if the system's version does not support required subtitle filters.\n- [REMOTE_CODE_EXECUTION]: It involves executing the downloadedffmpegbinary and usesuvxto fetch and run theopenai-whisperpackage for transcription tasks.\n- [COMMAND_EXECUTION]: The orchestrator uses shell commands to invoke various media processing tools, includingffmpeg,whisper, and custom Python scripts for dubbing and rendering.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted SRT (SubRip Subtitle) files, which are interpolated intoffmpegcommand lines for rendering.\n - Ingestion points: SRT files provided by the user or generated by automated transcription tools.\n
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore' warnings for the content of the SRT files.\n
- Capability inventory: The skill has access to shell execution via
ffmpeg,whisper, and local Python scripts.\n - Sanitization: No specific sanitization or escaping of the subtitle text is described before it is passed to shell-based filters.
Audit Metadata