srt

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and translates external subtitle content (SRT) extracted from video/audio files or provided directly by users.
  • Ingestion points: Subtitle text processed in the 'Translate' phase of SKILL.md, as well as SRT files read by scripts/style.mjs.
  • Boundary markers: There are no explicit delimiters or specific 'ignore instructions' warnings provided to the agent to prevent it from obeying commands embedded within the subtitle text during the translation process.
  • Capability inventory: The skill possesses the ability to execute shell commands (ffmpeg), perform network requests (Perso AI API), and write to the filesystem.
  • Sanitization: While formatting for ASS/SRT is handled, the natural language content is not filtered for prompt injection patterns before being processed by the agent.
  • [COMMAND_EXECUTION]: The skill executes ffmpeg via scripts/style.mjs and lib/subtitle_style.mjs to burn subtitles into video files and generate styling previews.
  • [EXTERNAL_DOWNLOADS]: The worker scripts perform network operations to perso.ai and portal-media.perso.ai for media uploads, transcription requests, and downloading assets. These domains are vendor-owned resources for 'perso-ai'. Additionally, the skill performs a version check for updates at runtime.
  • [REMOTE_CODE_EXECUTION]: The skill's scripts (scripts/srt.mjs, scripts/style.mjs) rely on libraries and scripts imported from a sibling dubbing directory (e.g., ../../dubbing/lib/gates.mjs). The skill's functionality is dependent on the presence and integrity of these external files.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 04:56 AM