transcribe-video
Pass
Audited by Gen Agent Trust Hub on Mar 2, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [PROMPT_INJECTION]: The skill processes user-supplied file paths and language codes that are interpolated into shell commands. This creates a surface for indirect prompt injection or command manipulation if arguments are not properly handled.\n
- Ingestion points: User-provided file paths and language codes in
$ARGUMENTS.\n - Boundary markers: None present in the command templates.\n
- Capability inventory: The
Bashtool is used to executeffmpegandawsCLI commands.\n - Sanitization: No sanitization or escaping logic is defined for the input arguments in the skill documentation.\n- [COMMAND_EXECUTION]: The skill relies on the
Bashtool to executeffmpegandawsCLI commands to perform audio extraction and interact with AWS services. The skill employs security best practices by restricting theBashtool to a specific whitelist of binaries and including a thorough cleanup process for temporary files and cloud resources.\n- [DATA_EXFILTRATION]: Local audio data is uploaded to an AWS S3 bucket. This involves a well-known service (AWS) and requires user-configured credentials, representing standard functionality for the intended transcription service.
Audit Metadata