short-drama-breakdown
Pass
Audited by Gen Agent Trust Hub on Nov 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/breakdown_tool.pyscript executes system binaries (ffmpegandffprobe) using thesubprocessmodule to perform video and audio analysis. The implementation follows security best practices by passing arguments as lists and avoidingshell=True, which mitigates command injection risks. The tool validates numerical inputs such as thresholds and crop coordinates before interpolation into filter strings. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an attack surface for indirect prompt injection because it processes untrusted external data, specifically video transcripts (SRT, WebVTT, JSON) and drama scripts. Ingestion points: Transcripts and script files are parsed by
breakdown_tool.pyand the extracted content is provided to the agent via measured JSON files. Boundary markers: The instructions inreferences/breakdown-dimensions.mdprovide a structured reporting method (Direct Observation, Interpretation, Unknown) which helps the agent distinguish between raw data and subjective analysis. Capability inventory: The skill can execute media processing commands and write analysis files (JSON, JPG, MP4) to local directories. Sanitization: The Python script uses regular expressions to strip markup and non-spoken content from transcripts. No active exploitation was detected.
Audit Metadata