video-full-process
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The orchestrator scripts
process_video.pyandremap_chapters.pyutilize thesubprocessmodule to run FFmpeg and execute helper Python scripts liketranscribe_video.pyandsuggest_chapters.py. All command invocations use argument lists rather than raw shell strings, which is a secure implementation that prevents shell injection attacks. - [INDIRECT_PROMPT_INJECTION]: The skill processes video transcripts (external data) to generate chapter titles, descriptions, and Markdown documentation. This introduces a surface for indirect prompt injection where adversarial audio content could be transcribed and later influence the agent when it reads the generated files.
- Ingestion points: The scripts read from
transcript.json, which is generated from external video content via the Whisper API. - Boundary markers: There are no specific delimiters or warnings used in the generated documentation to segregate external transcript data from agent instructions.
- Capability inventory: The skill possesses file-writing capabilities and uses
subprocess.runto interact with system tools and other scripts. - Sanitization: The transcript content is processed for remapping and documentation without specific filtering or sanitization for prompt injection patterns.
Audit Metadata