create-video-shorts
Fail
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: HIGHCOMMAND_EXECUTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Orchestrates video processing by extensively invoking shell commands via Python's
subprocessmodule and direct Bash scripts. It executes tools includingffmpeg,ffprobe, andnodeto manipulate media files, extract frames, and encode video segments. - [DYNAMIC_EXECUTION]: Uses
__import__inscripts/build_gfx.pyandscripts/sheet.pyto dynamically load and execute functions from local Python files based on generated tags. While this is part of the parallel subagent architecture, it involves executing code generated or discovered at runtime. - [EXTERNAL_DOWNLOADS]:
scripts/setup.shprovisions the environment by downloading multiple dependencies throughuv pip(includingtorch,mediapipe, andfaster-whisper) and utilizesnpxto fetch thehyperframesrendering engine. These originate from established registries and trusted vendors. - [INDIRECT_PROMPT_INJECTION]: The skill ingests raw audio data from user videos which is processed via speech-to-text. This untrusted data influences planning, graphics generation, and text overlays.
- Ingestion points:
transcript_full.jsoncreated inscripts/transcribe.pyfrom user-provided video files. - Boundary markers: None. Instructions in the video audio are not isolated from the agent's processing logic.
- Capability inventory: Extensive subprocess execution, file system writes, and package installation across all pipeline scripts (
analyze.sh,finish.sh,compose.py). - Sanitization: Minimal; only punctuation removal and case-matching are performed during token alignment.
- [REMOTE_CODE_EXECUTION]: Automated scanners identified a
fetchpattern inscripts/eyesheet.pyinvolvingsubprocess. Static analysis confirms this is a local utility function for extracting video frames via FFmpeg and does not involve remote network-based execution.
Recommendations
- HIGH: Downloads and executes remote code from: unknown (check file) - DO NOT USE without thorough review
Audit Metadata