media-processing
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill involves the execution of shell commands (
ffmpegandffprobe) to process media files. This is the primary intended function of the skill. The instructions mitigate execution risks by mandating a confirmation step (AskUserQuestion) before any processing command is run and requiring the agent to show the full command in 'Pro mode' for user review. - [INDIRECT_PROMPT_INJECTION]: The skill represents a surface for indirect prompt injection as it processes metadata from external media files.
- Ingestion points: Media file metadata extracted via
ffprobeand formatted as JSON (Step 1). - Boundary markers: The interaction flow requires a human-in-the-loop confirmation (
AskUserQuestion) before acting on the ingested data. - Capability inventory: The agent has shell access to run
ffmpegandffprobecommands. - Sanitization: The skill instructs the agent to request specific metadata fields rather than processing raw, unparsed text, which reduces the potential for malicious injection through metadata fields.
Audit Metadata