video-editor
Pass
Audited by Gen Agent Trust Hub on Nov 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/compose_video.pyscript invokesffmpegfor media processing andcurlfor file uploads via thesubprocessmodule. These executions are part of the skill's core functionality to render and manage video assets.\n- [EXTERNAL_DOWNLOADS]: The skill interacts with external endpoints, specificallyfal.aifor video generation andcatbox.moefor temporary media hosting. It fetches generated media files from these services when the Image-to-Video feature is enabled.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests narrative and caption text fromscenes.jsonto be rendered as overlays in the final video. This represents an indirect prompt injection surface as the ingested text is processed and burned into video frames.\n - Ingestion points: Data is read from
scenes.jsonregardingnarrationandtext_overlayfields.\n - Boundary markers: No explicit delimiters are used to differentiate user-provided text from internal instructions within the processed JSON.\n
- Capability inventory: The skill is capable of network communication (urllib, curl), file system interaction (shutil), and command execution (ffmpeg).\n
- Sanitization: The script includes basic newline escaping specifically for the Advanced Substation Alpha (ASS) subtitle format to ensure proper rendering.
Audit Metadata