transform-encode-hls-video-with-transloadit

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses npx to execute the @transloadit/node CLI tool. This is a standard method to run the vendor's official utility for processing media files.- [EXTERNAL_DOWNLOADS]: Fetches the @transloadit/node package from the official NPM registry during execution. This package belongs to the skill's authoring organization (transloadit).- [INDIRECT_PROMPT_INJECTION]:
  • Ingestion points: Reads local media files specified via command-line arguments (e.g., ./input.mp4 in SKILL.md).
  • Boundary markers: None present.
  • Capability inventory: Subprocess execution via npx, network communication with Transloadit's API, and file writing to the ./out/ directory.
  • Sanitization: None.
  • Risk: Low; processing binary video files via an encoding service poses minimal risk of prompt injection compared to text-based inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 08:30 PM