worldview-gameplay-video-analysis
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted external data, including gameplay footage, YouTube/Bilibili metadata, and user-provided or auto-generated subtitles, to generate design insights. This creates a surface for indirect prompt injection if the source content or its metadata contains adversarial instructions intended to influence the agent's behavior.
- Ingestion points: The skill accepts URLs for external video platforms and local media files as described in
README.mdandSKILL.md. - Boundary markers: The instructions in
SKILL.mdattempt to mitigate accidental obedience by requiring a strict separation between observed facts, reported data, and agent inferences. - Capability inventory: The agent is authorized to download media, invoke external AI classifiers (Jev), and execute video processing tools (
ffmpeg). - Sanitization: While the skill mentions blurring private data and omitting copyrighted material, it lacks specific instructions for sanitizing or escaping textual input from subtitles or commentary before interpolation into prompts.
- [EXTERNAL_DOWNLOADS]: The skill fetches media from well-known video hosting services (YouTube, Bilibili) and interacts with the Vercel AI Gateway (
typesafe-ai/jev) for text-based event classification. - Evidence:
SKILL.mdandSOURCE.mdexplicitly reference the use oftypesafe-ai/jevatvercel.com. - Analysis: These interactions are documented neutrally as they target well-known, established services necessary for the skill's stated purpose.
- [COMMAND_EXECUTION]: The skill requires the use of
ffmpegand other local media decoders to process video and audio streams. - Evidence:
SKILL.mdinstructs the agent to useffmpeg-derived metadata, thumbnails, and spectrograms for analysis. - Analysis: This involves executing shell commands to operate standard utility binaries typically expected in environments supporting media analysis.
Audit Metadata