skills/silvabyte/skills/edit-video/Gen Agent Trust Hub

edit-video

Pass

Audited by Gen Agent Trust Hub on Mar 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill invokes system binaries including ffmpeg, ffprobe, and a local whisper-cli build using the Bun.spawn API. These operations are restricted to video processing tasks such as audio extraction, segment cutting, and concatenation, which are the primary functions of the skill.
  • [PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it transcribes audio from external video files and presents the text to the agent for analysis and planning.
  • Ingestion points: External video files are processed via scripts/transcribe.ts and scripts/lib/whisper.ts.
  • Boundary markers: The transcript is formatted into markdown tables in scripts/lib/transcript.ts and scripts/lib/analyze.ts without specific boundary markers or instructions to ignore embedded commands.
  • Capability inventory: The agent can read and write files on the local filesystem and execute video processing commands via ffmpeg in scripts/lib/ffmpeg.ts.
  • Sanitization: Transcribed text is not sanitized or filtered for potential malicious instructions before being included in the agent's context.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 13, 2026, 03:08 PM