caption-styling
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied subtitle files (SRT/VTT) which can be a vector for indirect prompt injection if the files contain instructions targeting the AI agent.\n
- Ingestion points:
SKILL.md(Workflow Step 7) andscripts/check_captions.pyingest external subtitle data.\n - Boundary markers: The skill instructions do not specify any delimiters or warnings to ignore embedded instructions within the subtitle text.\n
- Capability inventory: The skill utilizes local CLI execution for
pythonandffmpegcommands.\n - Sanitization: The
check_captions.pyscript removes formatting tags via regex but does not filter or escape the actual text content for prompt injection patterns.\n- [COMMAND_EXECUTION]: The skill relies on executing a local Python script provided by the author and suggests standardffmpegcommands for video processing tasks.
Audit Metadata