auto-subtitle
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches transcription models from HuggingFace during its initial execution. HuggingFace is a well-known and established service for AI model hosting and distribution.
- [COMMAND_EXECUTION]: The skill relies on executing shell commands via
pythonfor transcription andffmpegfor video encoding. This is the intended primary purpose of the skill for media processing tasks. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill incorporates user-provided file paths and 'theme names' when constructing output directories and shell command strings in
SKILL.md. - Boundary markers: The command templates provided in the instructions do not explicitly include escaping or boundary markers for these user-controlled strings.
- Capability inventory: The skill uses tools capable of executing shell commands and writing to the file system.
- Sanitization: The instructions do not detail specific sanitization or validation logic for user-provided inputs (like the theme name) before they are interpolated into executable shell commands, which represents a potential injection surface if the executing agent does not apply its own safety controls.
Audit Metadata