video-use-best-practices
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads Hebrew font files (Heebo, Rubik, Assistant) from the official Google Fonts repository on GitHub and suggests downloading static FFmpeg binaries from Evermeet, a well-known provider of macOS builds.
- [COMMAND_EXECUTION]: The skill executes local commands using Bash and Python to perform video transcription, subtitle burning, and bidirectional text processing. It also manages environment variables and file system operations within the project scope.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted transcription data from the ElevenLabs Scribe API. It implements sanitization logic to remove specific Unicode characters and stabilize punctuation in Hebrew text, which serves to mitigate potential injection or malformed data issues during the rendering process.
- [PRIVILEGE_ESCALATION]: The
install-hebrew-fonts.shutility script utilizessudoto perform system-level operations, such as updating the font cache and moving font files to protected system directories on Linux platforms.
Audit Metadata