videocut-clip-oral
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes
subprocess.runto callffmpegfor extracting audio segments and performing speech activity detection (VAD) intips/口误识别方法论.mdandtips/转录最佳实践.md. - [EXTERNAL_DOWNLOADS]: The skill requires installing external Python packages
funasrandmodelscopeand downloads pre-trained AI models from ModelScope. - [DYNAMIC_EXECUTION]: The skill executes Python code for character-level tokenization and VAD detection at runtime.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted video data for transcription and review.
- Ingestion points: Processes user-provided
*.mp4video files to generate_transcript.jsonand_审查稿.md(SKILL.md). - Boundary markers: Absent; instructions lack delimiters or warnings to ignore malicious instructions within transcripts.
- Capability inventory: Shell command execution via
subprocess.runand file system operations likeos.remove. - Sanitization: No sanitization of the transcribed speech text is performed before it is used for automated tasks.
Audit Metadata