video-digest-summarize
Pass
Audited by Gen Agent Trust Hub on Oct 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/vd_sessions.pyexecutes theffmpegutility viasubprocess.runto generate video clips. While the script passes arguments as a list to avoid shell injection, it populates command-line parameters such as start/end times and filenames using data directly from thetalks.jsoninput file.\n- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it processes untrusted video transcripts through LLM prompts.\n - Ingestion points: Transcripts are read from
transcript/transcript.tsvand distributed into session files processed by prompts in thereferences/directory.\n - Boundary markers: There are no explicit delimiters (e.g., XML tags or unique markers) in the prompts to separate the transcript data from the instructions, nor are there specific warnings to the model to ignore instructions within the transcript.\n
- Capability inventory: The skill allows the writing of summary and takeaway files to the local file system and the execution of
ffmpegfor video processing.\n - Sanitization: The
scripts/vd_clean.pyscript performs transcript cleaning but does not sanitize the text for potential prompt injection payloads before processing by the LLM.
Audit Metadata