edit-iphone-timelapse
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill initiates background Apple Photos scripting to query and export movies, and uses ffprobe for post-render verification.
- [INDIRECT_PROMPT_INJECTION]: The instructions involve processing QuickTime metadata from external movie files, which serves as an ingestion point for untrusted data.
- Ingestion points: movie file metadata from Apple Photos and duration data from references/music-offsets.tsv.
- Boundary markers: No explicit instructions are provided to ignore potential instructions embedded in metadata.
- Capability inventory: The skill writes to ~/Downloads, reads from ~/Music, and executes media manipulation commands.
- Sanitization: No validation or sanitization of movie metadata is performed before using it in the rendering logic.
Audit Metadata