make-clips
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external transcript files, which provides a surface for indirect prompt injection attacks where malicious instructions could be embedded in the content being analyzed.
- Ingestion points: Reads
.txt,.srt, and.vtttranscript files from the~/Desktop/Clippings/directory and processes user-pasted content (SKILL.md). - Boundary markers: The skill lacks explicit instructions to use delimiters or to ignore potential instructions embedded within the transcript text.
- Capability inventory: The skill has the capability to read from and write to the user's
~/Desktop/directory (SKILL.md). - Sanitization: No evidence of input validation, filtering, or content sanitization was found in the skill instructions.
Audit Metadata