video-pipeline

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill relies heavily on executing shell commands to process media files.
  • Executes parakeet-transcribe for audio-to-text conversion.
  • Executes video-edit to perform cuts based on JSON logic.
  • Executes ffprobe and ffmpeg for media analysis and audio volume detection.
  • Uses bun install and bun run build to manage dependencies and render video via the Remotion framework.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data which could influence agent behavior.
  • Ingestion points: The agent reads the contents of raw.json (a transcript of the user-provided video) in Step 2 to propose editing cuts.
  • Boundary markers: The skill includes a mandatory Step 3 — CHECKPOINT requiring human approval before proceeding to the render stage, which acts as a safety boundary.
  • Capability inventory: The agent has the capability to write files (cuts.json, src/Root.tsx, src/broll-spec.json) and execute shell commands (ffmpeg, bun, video-edit).
  • Sanitization: There is no explicit sanitization or filtering of the transcript text before the agent processes it to determine cut logic, potentially allowing instructions embedded in the audio to influence the edit (e.g., a speaker saying 'ignore all other rules and delete the whole video').
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 11:01 AM