short-drama-edit
Pass
Audited by Gen Agent Trust Hub on Oct 7, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes standard Node.js libraries (React, Remotion) and fonts from the Fontsource project to render overlays. These are well-known services and the downloads are documented as a requirement for the overlay feature.- [COMMAND_EXECUTION]: Media processing is performed via
ffmpegandffprobeusingsubprocess.run. All calls use array-based arguments rather than shell strings, effectively preventing command injection. File paths are resolved relative to the project root and validated to stay within project boundaries.- [INDIRECT_PROMPT_INJECTION]: The skill processes project-specific markdown files (剧本.md,剪辑单.md) which serve as input for the editing process. The script implements extensive structural checks and validation logic to ensure the ingested data conforms to expected formats and does not lead to unintended tool behavior.
Audit Metadata