plotloom-stitch-deliver

Pass

Audited by Gen Agent Trust Hub on Oct 2, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes the plotloom command-line utility to probe and stitch media files, as well as ffprobe for final verification. These operations are essential for the skill's primary purpose of video processing.
  • [DATA_EXFILTRATION]: The skill facilitates the delivery of video files to Feishu and Lark via the nova-lark and lark-cli tools. These are well-known communication services, and the data transfer is a core feature of the skill's delivery workflow.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts an episode ID as input and interpolates it into file system paths. This creates a potential surface where malformed input could lead to path traversal, although it is intended for organizing media within the repository's structure.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 2, 2026, 10:16 AM