ai-short-drama-production
Pass
Audited by Gen Agent Trust Hub on Aug 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill includes references to external video content on Douyin (
douyin.com) withinreferences/SOURCE-LEDGER.md. These links are used as instructional references for production techniques. As Douyin is a well-known service and the links are presented as static references without automated code execution, this is a safe use of external resources. - [PROMPT_INJECTION]: The skill is designed to process user-supplied narrative inputs, which introduces a surface for indirect prompt injection.
- Ingestion points: User-provided scripts, story outlines, and oral descriptions are ingested in
SKILL.mdSection 1. - Boundary markers: The instructions mandate marking supplementary facts as
assumedand missing data aspendinginSKILL.mdSection 1 and 5, providing a mechanism to distinguish external data from core instructions. - Capability inventory: The skill's primary function is orchestrating production contracts and invoking sub-skills for characters and scenes. It does not possess capabilities for sensitive file access, shell command execution, or network exfiltration.
- Sanitization: Input data is mapped into structured JSON templates found in
references/control-contracts.md, providing a layer of data organization, though specific string sanitization routines are not defined.
Audit Metadata