investigation-video-skill
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several system binaries for its primary media processing and automation tasks.
- Scripts including
qa.py,clipcheck.py, andmix-bgm.shexecuteffmpegandffprobeto generate frames, mix audio, and verify video metadata. - The
pipeline-playbook.mddefines workflows usingyt-dlpfor downloading reference footage andPlaywrightfor automated evidence collection via browser screenshots. - All executions are consistent with the intended video production pipeline and use standard argument passing to avoid shell injection.
- [EXTERNAL_DOWNLOADS]: The skill connects to well-known technology services to fulfill its functionality.
- It integrates with the ByteDance Volcano Engine (Volcengine) API for high-quality text-to-speech synthesis.
- It facilitates scraping trending topics and research data from major platforms such as Baidu, Toutiao, Zhihu, Bilibili, and 36kr.
- These connections are documented for the user and target established service domains.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted news content and search results, creating a potential ingestion surface.
- Ingestion points: News hot-lists and web search results enter the agent context through scraping tasks defined in
pipeline-playbook.md. - Boundary markers: The workflow uses structured JSON manifests (
sentences.json,timeline.json) to isolate processing steps. - Capability inventory: The skill has shell access to media tools and a browser engine (Playwright).
- Sanitization: The skill contains explicit instructions for the AI to perform manual fact-checking and source cross-referencing in
video-common/references/fact-check.md, mitigating the risk of obeying malicious instructions embedded in news sources.
Audit Metadata