clipify
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes various shell commands to perform video and audio processing.
- Invokes
ffmpegfor video trimming, audio extraction, and rendering. - Uses
whisperfor speech-to-text transcription. - Executes local Python scripts (
analyze.py,build_pan.py, etc.) for specialized processing logic. - [INDIRECT_PROMPT_INJECTION]: The skill interprets untrusted content derived from audio transcripts to identify highlight moments.
- Ingestion points: Transcripts generated by
whisperare read by the agent inSKILL.md(Step 1) to identify "funny" segments. - Boundary markers: Absent; the agent processes the transcript directly.
- Capability inventory: Shell command execution via
ffmpegandwhisper, and file system writes in/tmp/clipify/. - Sanitization: Absent; however, the workflow includes a manual checkpoint where the agent proposes candidates to the user for confirmation before proceeding with rendering.
Audit Metadata