volc-asr
Pass
Audited by Gen Agent Trust Hub on Jun 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by processing transcribed text from untrusted user media and presenting it to the agent to guide editing decisions.
- Ingestion points: Transcribed text and metadata from the Volcengine ASR service are ingested by
scripts/transcribe.pyand presented to the agent for analysis. - Boundary markers: The script uses output headers such as "【逐段标注】" and "【分段时间戳】" to provide structural separation for the data.
- Capability inventory: The skill possesses shell execution capabilities via
ffmpegand file system access inscripts/transcribe.pyto perform video modifications. - Sanitization: No specific sanitization or filtering of the transcribed text is performed before it is interpolated into the agent's context.
- [COMMAND_EXECUTION]: The skill uses the
ffmpegutility to perform video cutting and concatenation based on transcription data. - Evidence: Use of
subprocess.run()inscripts/transcribe.pyto executeffmpegcommands. - Context: This is the primary intended functionality of the skill and is used to process local video files provided by the user.
Audit Metadata