yichen-jianying-edit
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The script
scripts/headless_draft.pydynamically loads and executes Python components from a separately installed engine usingrunpy.run_path. It includes a security pinning mechanism that validates the SHA-256 hash of every loaded file against a hardcoded manifest, preventing the execution of modified or unauthorized core code. - [DYNAMIC_EXECUTION]: The ASR (Speech-to-Text) wrapper in
scripts/asr_once.pydynamically loads a local transcription script viarunpy.run_path. This target script is determined by theYICHEN_ASR_EXECUTORenvironment variable or a default path in the user's home directory. - [COMMAND_EXECUTION]: The skill utilizes the
subprocessmodule to execute media utilities such asffmpegandffprobefor analyzing video and rendering audio reviews. It also usessubprocessto trigger the local ASR executor script. All commands use argument lists rather than shell strings to mitigate command injection risks. - [INDIRECT_PROMPT_INJECTION]: The skill ingests complex structured data via
edit-plan.jsonfiles which determine video cutting logic. - Ingestion points:
scripts/edit_plan.pyreads and parses user-supplied JSON plan files. - Boundary markers: The skill requires explicit confirmation flags (
settings_confirmed,check_decisions_pending) within the plan and instructs the agent to centrally resolve unclear semantic decisions with the user. - Capability inventory: The processing scripts have the capability to write to local work directories and execute media processing commands via
ffmpeg. - Sanitization: The compiler script performs extensive validation on input data, including strict checks for numeric types, finite values, and valid frame-aligned time ranges.
Audit Metadata