mj-video2md-html
Pass
Audited by Gen Agent Trust Hub on Jun 30, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute multiple local shell commands for media processing and project maintenance.
- Evidence: Commands include
ffmpegfor frame extraction,sipsfor image compression, andpnpmfor running type checks and linters (pnpm types:check,pnpm lint). These are standard operations for the described developer workflow. - [DATA_EXFILTRATION]: The skill automates the transfer of local image assets to remote storage.
- Evidence: The workflow uses
wrangler r2 object putto upload files to the01mvp-public-assetsbucket and usescurl -Ito verify availability onassets.01mvp.com. These domains are identified as vendor resources associated with the author 'makerjackie'. - [PROMPT_INJECTION]: The skill presents a surface for indirect prompt injection via the ingestion of untrusted subtitle data.
- Ingestion points: The agent reads and processes external
.srtfiles as part of Step 2 in the workflow defined inSKILL.md. - Boundary markers: None identified. There are no explicit instructions to the agent to treat the subtitle text as untrusted or to ignore embedded instructions within those files.
- Capability inventory: The agent has access to shell execution (
pnpm,ffmpeg), network write capabilities (wrangler), and repository modification (git). - Sanitization: The instructions focus on correcting transcription errors for stylistic consistency but do not provide mechanisms for sanitizing or escaping potentially malicious instructions within the subtitles.
Audit Metadata