fireship-style-short
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
setup_short.shto create directories and copy files, and it relies onffmpegandpython3to execute the rendering pipeline. These operations are within the scope of its functionality but involve shell-level interactions. - [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes
audio/words.json(transcribed from user-supplied audio). This data drives theShottiming and visual content in therender.pyscript. The lack of boundary markers or sanitization for this external input presents an indirect prompt injection surface. - Ingestion points:
audio/voice.wav,audio/words.json(used inrender_short_template.pyandshort_kit.py). - Boundary markers: None identified.
- Capability inventory: File system writes (
mkdir,cp), shell command execution (ffmpeg), and Python execution. - Sanitization: None identified in the provided scripts.
- [EXTERNAL_DOWNLOADS]: The pipeline incorporates a
fetch_footage.pyscript from a sibling skill, which performs search and download operations to acquire video assets from external sources based on agent-generated queries.
Audit Metadata