visual-transition-reel

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides instructions for the agent to use ffmpeg commands to extract frames from video clips and concatenate multiple clips into a final montage (e.g., ffmpeg -y -f concat -safe 0 -i clips.txt -c copy reel.mp4). These operations are local and consistent with the stated purpose of video editing.
  • [EXTERNAL_DOWNLOADS]: The documentation includes instructions to install related components from the PrunaAI/pruna-skills repository using the npx skills add command. These are identified as vendor-owned resources necessary for the skill's functionality.
  • [INDIRECT_PROMPT_INJECTION]: The workflow involves taking user-supplied descriptions for scenes and motions and passing them to generation tools, which represents an indirect injection surface.
  • Ingestion points: SKILL.md (Intake section) and templates/transition-plan.template.json via fields like edit_prompt and video_prompt.
  • Boundary markers: No specific delimiters or safety instructions are defined to isolate user input from system instructions.
  • Capability inventory: The agent can execute shell commands (ffmpeg) and invoke other generative skills.
  • Sanitization: No input validation or sanitization of the user-provided prompts is described.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 10:36 AM