wide-cam-podcast
Pass
Audited by Gen Agent Trust Hub on Jun 22, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Executes shell commands via
ffmpegandffprobeto concatenate video blocks, crop platform variants, and verify media file metadata. - [COMMAND_EXECUTION]: Utilizes the
vidjutsucommand-line interface to perform file uploads to cloud storage and manage service authentication. - [EXTERNAL_DOWNLOADS]: Communicates with external API endpoints at
api.wavespeed.ai,api.vidjutsu.ai, andgenerativelanguage.googleapis.comto perform image generation, video rendering, and compliance scanning. - [DATA_EXFILTRATION]: Transmits locally generated image frames and video clips to Wavespeed and VidJutsu cloud infrastructure. This behavior is documented as a requirement for the skill's media generation and compliance verification features.
- [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection in
recipes/04-define-clips.mdandreferences/clip-spec.md. It interpolates untrusted user dialogue directly into the instructions for the Seedance video model using simple single-quote delimiters ('<line>'). - Ingestion points: Dialogue lines from
script.mdandclips/block_*.json. - Boundary markers: Uses single quotes for dialogue, but lacks explicit "ignore embedded instructions" warnings for the model.
- Capability inventory: The skill has broad capabilities including subprocess execution (
ffmpeg,vidjutsu) and authenticated network operations. - Sanitization: No escaping or validation is performed on the dialogue strings before interpolation into the prompt template.
Audit Metadata