short-drama-edit
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
ffmpeg,ffprobe, andnpxviasubprocess.runto perform video cutting, concatenation, loudness normalization, and subtitle rendering. All shell commands are invoked using list-based arguments to mitigate the risk of command injection attacks. - [EXTERNAL_DOWNLOADS]: The skill provides clear instructions for installing the Remotion framework and its React dependencies via
npmin a dedicated cache directory. This optional feature enables high-quality typography for subtitles and targets well-known, legitimate software services. - [INDIRECT_PROMPT_INJECTION]: The editing process is driven by local project files (
剪辑单.md,剧本.md,视频提示词.md). The tool minimizes injection risks through rigorous sanitization, including float conversion for timecodes, range clamping for color and brightness adjustments, and character escaping (e.g., for ASS subtitle blocks) to ensure data is never interpreted as command or script instructions.
Audit Metadata