live-stream-clips
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/live_clip.pyexecutes system utilitiesffmpegandffprobevia thesubprocessmodule to calculate video duration, detect silences, and export video segments. - Evidence:
subprocess.check_outputandsubprocess.runare used in theduration,propose, andexport_clipfunctions with list-based arguments to perform media operations. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied SRT transcript files to identify video highlights, creating a surface for potential instruction injection.
- Ingestion points: The agent is prompted in
SKILL.mdto read SRT content pasted into the prompt or provided via file input to generate acuts.csvfile. - Boundary markers: The prompt template in
SKILL.mddoes not include specific delimiters or instructions to ignore potential commands embedded within the transcript text. - Capability inventory: The skill has the ability to execute file system writes and video processing commands via
scripts/live_clip.pybased on the agent's identification of highlights. - Sanitization: No textual sanitization or validation is performed on the transcript content before it is processed by the agent, allowing embedded instructions to potentially influence the selection and naming of clips.
Audit Metadata