visual-transition-reel
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the agent to use
ffmpegcommands to extract frames from video clips and concatenate multiple clips into a final montage (e.g.,ffmpeg -y -f concat -safe 0 -i clips.txt -c copy reel.mp4). These operations are local and consistent with the stated purpose of video editing. - [EXTERNAL_DOWNLOADS]: The documentation includes instructions to install related components from the
PrunaAI/pruna-skillsrepository using thenpx skills addcommand. These are identified as vendor-owned resources necessary for the skill's functionality. - [INDIRECT_PROMPT_INJECTION]: The workflow involves taking user-supplied descriptions for scenes and motions and passing them to generation tools, which represents an indirect injection surface.
- Ingestion points:
SKILL.md(Intake section) andtemplates/transition-plan.template.jsonvia fields likeedit_promptandvideo_prompt. - Boundary markers: No specific delimiters or safety instructions are defined to isolate user input from system instructions.
- Capability inventory: The agent can execute shell commands (
ffmpeg) and invoke other generative skills. - Sanitization: No input validation or sanitization of the user-provided prompts is described.
Audit Metadata