skills/advibly/skills/collage-motion/Gen Agent Trust Hub

collage-motion

Pass

Audited by Gen Agent Trust Hub on Jul 21, 2026

Risk Level: SAFEPROMPT_INJECTION
Full Analysis
  • [PROMPT_INJECTION]: The skill identifies a surface for indirect prompt injection during its image analysis phase.
  • Ingestion points: User-provided reference images are decoded into editable JSON specifications in 'PHASE A: ANALYZE' (SKILL.md).
  • Capability inventory: The skill has 'read+write' capabilities via 'advibly_generate_image', 'advibly_generate_video', and 'advibly_social_create_post' (SKILL.md), allowing interpreted data from images to flow into downstream generation and publishing tasks.
  • Boundary markers: There are no explicit instructions for the agent to ignore or delimit embedded text/instructions found within visual references.
  • Sanitization: The workflow lacks validation or sanitization steps for content extracted from user assets before it is used to build prompts.
  • [SAFE]: All core functionality is mediated through vendor-specific tools ('advibly_*') which are part of the author's ecosystem. This includes image/video generation, asset management, and social posting.
  • [SAFE]: No hardcoded credentials, persistence mechanisms, or unauthorized privilege escalation patterns were detected in the skill instructions or scripts.
  • [SAFE]: The skill uses clear, non-obfuscated instructions and relies on informative reference documentation ('references/collage-dimensions.md') to calibrate output quality.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 21, 2026, 02:04 PM