video-translate
Pass
Audited by Gen Agent Trust Hub on Oct 10, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes local project files to determine video edit ranges, creating an attack surface where untrusted data could influence command execution.
- Ingestion points: The skill reads edit metadata from
./public/<slug>.edit.json. - Boundary markers: None are used to isolate the data.
- Capability inventory: The skill utilizes
node,ffmpeg, andcurlfor file processing and network communication. - Sanitization: Data from the JSON file is interpolated directly into a
node -eshell command without validation. - [DYNAMIC_EXECUTION]: The skill uses
node -eto execute an inline JavaScript snippet that parses edit ranges and generates filter strings forffmpeg. - [EXTERNAL_DOWNLOADS]: The skill interacts with ElevenLabs' official API for video dubbing and translation services.
Audit Metadata