Video Editor

• Outcome: Pass
• Latest audit: May 29, 2026 at 8:36 PM UTC
• Version:
  1.0.0

Overview

This is a coherent video-editing skill that provides expected ffmpeg and Python recipes, with some operational cautions but no evidence of hidden, credential-seeking, persistent, or unrelated behavior.

Review generated commands before running them, especially batch loops, parallel jobs, package installs, and any command using overwrite flags. Keep original videos backed up, use a separate output directory, and confirm file globs and output names before processing many files.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

High

• Confidence: 95% confidence
• Finding: The activation rule is excessively broad and includes 'use ALWAYS' plus a wide set of generic video-related terms, which can cause the skill to trigger in situations where the user did not intend to invoke it. Over-broad invocation increases the chance of unnecessary file processing, command generation, or execution in contexts where a narrower tool should have been selected.

Missing User Warnings

Medium

• Confidence: 87% confidence
• Finding: These examples perform batch processing and include overwrite behavior (`-y`) and mass file writes, which can modify or replace many files quickly if used without careful scoping. In an agent setting, such patterns are dangerous because small path mistakes, glob expansion, or wrong working directories can cause broad unintended data loss or corruption.

VirusTotal

66/66 vendors flagged this skill as clean.