plotloom-stitch-deliver
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
plotloomcommand-line utility to probe and stitch media files, as well asffprobefor final verification. These operations are essential for the skill's primary purpose of video processing. - [DATA_EXFILTRATION]: The skill facilitates the delivery of video files to Feishu and Lark via the
nova-larkandlark-clitools. These are well-known communication services, and the data transfer is a core feature of the skill's delivery workflow. - [INDIRECT_PROMPT_INJECTION]: The skill accepts an episode ID as input and interpolates it into file system paths. This creates a potential surface where malformed input could lead to path traversal, although it is intended for organizing media within the repository's structure.
Audit Metadata