video-editor

Pass

Audited by Gen Agent Trust Hub on Nov 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The scripts/compose_video.py script invokes ffmpeg for media processing and curl for file uploads via the subprocess module. These executions are part of the skill's core functionality to render and manage video assets.\n- [EXTERNAL_DOWNLOADS]: The skill interacts with external endpoints, specifically fal.ai for video generation and catbox.moe for temporary media hosting. It fetches generated media files from these services when the Image-to-Video feature is enabled.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests narrative and caption text from scenes.json to be rendered as overlays in the final video. This represents an indirect prompt injection surface as the ingested text is processed and burned into video frames.\n
  • Ingestion points: Data is read from scenes.json regarding narration and text_overlay fields.\n
  • Boundary markers: No explicit delimiters are used to differentiate user-provided text from internal instructions within the processed JSON.\n
  • Capability inventory: The skill is capable of network communication (urllib, curl), file system interaction (shutil), and command execution (ffmpeg).\n
  • Sanitization: The script includes basic newline escaping specifically for the Advanced Substation Alpha (ASS) subtitle format to ensure proper rendering.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 9, 2026, 09:22 PM