tesseract-video
Pass
Audited by Gen Agent Trust Hub on Nov 7, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to download the Tesseract rendering engine and conversion utilities from the official mirage-hq GitHub repository, which is the verified vendor.
- [COMMAND_EXECUTION]: Local Python scripts
tesseract_sound.pyandtesseract_media.pyutilizesubprocess.runto executeffmpegandffprobefor media analysis, thumbnail generation, and audio processing. - [DYNAMIC_EXECUTION]: The skill supports procedural animation via
layerTimeJsCodeand custom visual effects through WGSL shaders, both of which are scoped to the Tesseract engine's rendering context. - [INDIRECT_PROMPT_INJECTION]: The skill ingests local media files and project JSON documents which could potentially contain instructions in metadata. Ingestion points: Local media files and project JSON. Boundary markers: Not explicitly enforced for media binary data. Capability inventory: File system access and local command execution (ffmpeg, tsrct). Sanitization: Binary media processing relies on standard decoder security.
Audit Metadata