video-editing

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructions include various shell commands for FFmpeg to perform deterministic video editing tasks such as cutting, concatenating, and reframing. It also utilizes npx remotion for rendering React-based video compositions.
  • [EXTERNAL_DOWNLOADS]: The skill facilitates interaction with external services including ElevenLabs for audio generation and fal.ai for media assets. These references target well-known service providers and include best practices such as using environment variables for API authentication.
  • [INDIRECT_PROMPT_INJECTION]: The workflow relies on the agent processing potentially untrusted external data in the form of video transcripts to plan video structures and generate edit decision lists.
  • Ingestion points: Video transcripts and recordings are ingested for analysis in Layer 2 (SKILL.md).
  • Boundary markers: The provided example prompts do not include explicit delimiters or safety instructions to ignore embedded commands within the transcript data.
  • Capability inventory: The skill utilizes shell command execution (FFmpeg, Remotion) and network operations (requests), which could be targets for manipulation via injected instructions.
  • Sanitization: No explicit sanitization or validation of the ingested transcript content is performed before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 07:27 AM