Guides multimodal media authentication and deepfake forensics using provenance checks, metadata review, PRNU/noise analysis, temporal consistency, semantic forensics, and evidence reporting. Use when the user asks to verify images, audio, or video, investigate synthetic media, assess fake or manipulated content, or prepare a media authenticity report.
Install with Codex or Claude Copy this prompt, paste it into Codex, Claude, or another assistant, and let it review the skill page and install it for you.
A direct command skips the review prompt. Inspect the source before running it.
Guides multimodal media authentication and deepfake forensics using provenance checks, metadata review, PRNU/noise analysis, temporal consistency, semantic forensics, and evidence reporting. Use when the user asks to verify images, audio, or video, investigate synthetic media, assess fake or manipulated content, or prepare a media authenticity report.
Comprehensive framework for detecting synthetic media, analyzing manipulation artifacts, and establishing media provenance in the post-empirical era.
Key Insight: Traditional detection methods (PRNU, IGH, DQ) are like fingerprints—helpful, but disputable. Cryptographic provenance (C2PA) is like a DNA match—cryptographically secure (SHA-256, ~2¹²⁸ collision resistance).
When to Use
Verifying authenticity of images or videos before publication
Detecting AI-generated or manipulated media (deepfakes, face swaps, synthetic voices)
Forensic analysis of suspicious media for legal or journalistic purposes
Implementing automated media authentication pipelines
Establishing content provenance and chain of custody
Countering disinformation campaigns and Advanced Persistent Manipulators (APMs)
Deepfakes are synthetic media created using deep learning techniques—primarily Generative Adversarial Networks (GANs), Diffusion Models, and Autoencoders—to generate or manipulate audiovisual content with a high degree of realism. The term combines "deep learning" and "fake."
Real Case (2024): WPP CEO Mark Read was targeted by a sophisticated deepfake voice clone attempting to authorize fraudulent transfers [19]. Deepfake fraud cases surged 1,740% in North America between 2022-2023, with average losses exceeding $500,000 per incident [18].
Current Scale (2025-2026)
Metric
Value
Source
Deepfakes shared annually
8 million (2025) vs 500,000 (2023)
Industry estimates
Projected synthetic content
90% of online content by 2026
Europol
Non-consensual intimate imagery (NCII)
98% of all deepfakes
EU Commission
Key Insight: The exponential growth rate means detection systems face an ever-increasing volume challenge, reinforcing the need for proactive authentication (C2PA) over reactive detection.
The Future of Deepfakes
Timeline
Development
Implication
Now (2026)
Real-time video deepfakes, commoditized tools
Anyone can create convincing fakes
Near Future
Interactive deepfakes in video calls
Trust in live communication erodes
Medium Term
Undetectable synthetic media
Detection becomes probabilistic, not binary
Long Term
"Reality-as-a-Service"
Authenticated media becomes the norm, unsigned content is suspect
The Detection Arms Race
Recent research confirms the growing challenge of detection generalizability [1]:
Generation Quality: ████████████████████░░░░ 85% (2026)
Detection Accuracy: █████████████░░░░░░░░░░░ 55% (2026)
↑ Gap widening over time
Key Insight: We are transitioning from a world where "seeing is believing" to one where "cryptographic proof is believing." The future lies not in perfect detection, but in provenance infrastructure (C2PA v2.3) that proves authenticity at creation [15, 16]. Traditional detection methods (PRNU, IGH, DQ) are like fingerprints—helpful, but disputable. Cryptographic provenance (C2PA) is like a DNA match—cryptographically secure (SHA-256, ~2¹²⁸ collision resistance).
2. Strategic Context: The Post-Empirical Era
The Crisis of Empirical Evidence (2026)
The boundary between authentic and synthetic media has effectively vanished. Trillion-parameter models have commoditized the generation of photorealistic synthetic content, transforming deepfakes from isolated experiments into an industrialized disinformation capability.
Psychological operations through synthetic threats
Confidence scoring, sensemaking support
3. System Architecture
LLM Integration Strategy
The skill implements a hierarchical model structure for forensic analysis:
Role
Model
Version
Function
Lead
Claude Opus
4.5
Complex synthesis of forensic data, multimodal analysis, report generation
Validation
Gemini Pro
3.0
Cross-validation of detection results, second opinion on edge cases
Reasoning
GLM Pro Thinking
4.7
Logical verification of causal chains, step-by-step reasoning for forensic conclusions
Model Selection Rationale
Claude Opus 4.5: Best-in-class for nuanced multimodal analysis and synthesizing complex forensic evidence into coherent reports
Gemini Pro 3.0: Strong visual understanding for cross-validating image/video analysis results
GLM Pro Thinking 4.7: Chain-of-thought reasoning for transparent forensic logic that can be audited
Architecture Requirements
Asynchronous Processing Pipeline: Handle high token counts from multimodal analysis
Vector Database for CRF Profiles: Store and query Camera Response Function signatures
RAG Integration: Access forensic reference databases during inference
Tool Integration: ffmpeg, ExifTool, ImageMagick for low-level signal processing
4. Required Tools & Installation
Tool Overview
Tool
Purpose
Required
ffmpeg
Video processing, frame extraction, audio isolation
Yes
ffprobe
Metadata extraction, container analysis
Yes (bundled with ffmpeg)
exiftool
Deep metadata extraction, EXIF/XMP/IPTC analysis
Yes
imagemagick
Image processing, format conversion
Recommended
jq
JSON processing for metadata analysis
Recommended
c2patool
C2PA/CAI provenance verification
Optional
Auto-Installation by Agent
When a required tool is missing, the agent will detect this and offer to install it. User approval is required before any installation.
🔧 Tool Missing: ffmpeg
The agent needs 'ffmpeg' for video frame extraction and analysis.
This tool is not currently installed on your system.
Would you like me to install it?
[macOS] brew install ffmpeg
[Ubuntu] sudo apt install ffmpeg
[Windows] winget install ffmpeg
⚠️ Approval required: Type 'yes' to proceed or 'no' to skip.
Understanding C2PA Validation: The chain is verified step-by-step: (1) Certificate verified → (2) Signature valid → (3) Claims unchanged → (4) Image hash matches. One failure breaks the entire chain.
Detailed Reference
Read the full guide when the task needs detailed examples, long templates, troubleshooting matrices, appendices, or sections not included above. Keep this file unloaded for narrow tasks so the skill follows progressive disclosure.
