srt
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and translates external subtitle content (SRT) extracted from video/audio files or provided directly by users.
- Ingestion points: Subtitle text processed in the 'Translate' phase of
SKILL.md, as well as SRT files read byscripts/style.mjs. - Boundary markers: There are no explicit delimiters or specific 'ignore instructions' warnings provided to the agent to prevent it from obeying commands embedded within the subtitle text during the translation process.
- Capability inventory: The skill possesses the ability to execute shell commands (
ffmpeg), perform network requests (Perso AI API), and write to the filesystem. - Sanitization: While formatting for ASS/SRT is handled, the natural language content is not filtered for prompt injection patterns before being processed by the agent.
- [COMMAND_EXECUTION]: The skill executes
ffmpegviascripts/style.mjsandlib/subtitle_style.mjsto burn subtitles into video files and generate styling previews. - [EXTERNAL_DOWNLOADS]: The worker scripts perform network operations to
perso.aiandportal-media.perso.aifor media uploads, transcription requests, and downloading assets. These domains are vendor-owned resources for 'perso-ai'. Additionally, the skill performs a version check for updates at runtime. - [REMOTE_CODE_EXECUTION]: The skill's scripts (
scripts/srt.mjs,scripts/style.mjs) rely on libraries and scripts imported from a siblingdubbingdirectory (e.g.,../../dubbing/lib/gates.mjs). The skill's functionality is dependent on the presence and integrity of these external files.
Audit Metadata