ascii-video
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external text from SRT files and media data (video/audio) to drive visual effects. Maliciously crafted input could attempt to influence the agent's behavior during the analysis or script-building phases.
- Ingestion points: The
parse_srtfunction inreferences/inputs.mdreads content from user-supplied subtitle files. Media analysis routines ingest raw audio and video data for feature extraction. - Boundary markers: There are no specific delimiters or protective instructions surrounding the ingested text data in the current architecture.
- Capability inventory: The generated scripts utilize
subprocess.runto callffmpegandffprobe, and perform network requests to the ElevenLabs API via therequestslibrary. - Sanitization: Content extracted from external files is processed without explicit sanitization or filtering against instructional patterns before being interpolated into the rendering logic.
- [DYNAMIC_EXECUTION]: The skill's primary workflow involves the AI agent generating a standalone Python script which is then executed to perform the media processing and video rendering.
- Evidence: Instructions in
SKILL.mdguide the agent to 'Build the Script,' and theREADME.mdnotes that the agent 'writes the renderer, runs it.' The architecture relies on runtime code generation to customize the visual output based on user requests.
Audit Metadata