video-summarizer
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted video files which are sent to the Gemini API. Videos could contain audio or visual instructions designed to manipulate the generated summary.
- Ingestion points:
scripts/summarize_videos.pyscans for and reads all*.mp4files in the target directory. - Boundary markers: None present. The LLM is instructed to analyze the video content directly without explicit delimiters or warnings to ignore embedded instructions.
- Capability inventory: The skill writes Markdown files to the local file system and performs network operations to the Google Gemini API.
- Sanitization: No sanitization is performed on the output generated by the LLM before it is written to disk as a
.mdfile. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
google-genaiPython package. This is a well-known library provided by a recognized technology company. - [COMMAND_EXECUTION]: The skill operates by executing Python scripts that perform recursive file system scans, local file writes, and network requests to external API services.
Audit Metadata