edit-video
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks as it processes untrusted video transcripts; however, it includes strong mitigation instructions for the agent to ignore any commands within the data.
- Ingestion points: Raw video files and transcripts downloaded via
mcp__google-drive__download_fileand processed bywhisper.cpp(referenced in SKILL.md). - Boundary markers: Present. A prominent warning blockquote at the top of the file instructs the agent to treat transcripts as untrusted material.
- Capability inventory: Execution of local shell commands (
ffmpeg,remotion), Python script execution, and extensive Google Drive and Airtable API access. - Sanitization: The instructions direct the agent to quote and stop if it encounters text that appears to address it directly.
- [COMMAND_EXECUTION]: The skill requires the use of local command-line tools such as
ffmpegfor video trimming andremotionfor rendering, as well as the execution of Python snippets for data cleaning. - [EXTERNAL_DOWNLOADS]: The skill downloads content from Google Drive and references external software like
whisper.cppandRemotionfor core functionality.
Audit Metadata