edit-handoff
Pass
Audited by Gen Agent Trust Hub on Aug 27, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill specifies the installation of
video-studio-enginedirectly from the author's GitHub repository (https://github.com/scrollmark/social-skills/archive/refs/heads/master.tar.gz). This resource is owned by the vendor and is used to provide the necessary export scripts.- [INDIRECT_PROMPT_INJECTION]: The skill processes external project directories and application-specific metadata files, such as CapCut'sdraft_info.json. This ingestion of untrusted local data represents a potential attack surface. - Ingestion points: Local project directories specified by the
--projectflag and existing CapCut project folders. - Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potentially malicious content within these files.
- Capability inventory: The skill uses the
video-studioCLI to perform file system reads, writes, and media bundling. - Sanitization: The documentation does not specify sanitization or validation logic for the ingested project data.
Audit Metadata