promo-video
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
execSyncinscripts/generate-voiceover.tsandscripts/preflight.tsto invokeffmpeg,ffprobe, andwhisperfor audio manipulation and transcription. These commands are constructed using parameters from a configuration file generated during the workflow. - [INDIRECT_PROMPT_INJECTION]: The
scripts/discover-brand.tsscript extracts product names, descriptions, and taglines from a target repository'sREADME.mdandpackage.json. This external data is used to pre-populate prompts for the agent, creating a surface for indirect prompt injection if a repository contains malicious instructions. - Ingestion points:
discover-brand.tsreadspackage.json,README.md, andmanifest.jsonfrom the target project path. - Boundary markers: The skill implements a multi-phase interactive workflow where the user can confirm or override all discovered data via JSON-formatted questions.
- Capability inventory: The skill has the ability to execute shell commands (
execSync), write files (writeFileSync), and perform network requests (fetch). - Sanitization: Discovered text is used as-is in the agent's context without explicit filtering or escaping.
- [EXTERNAL_DOWNLOADS]: The skill communicates with the ElevenLabs API (
api.elevenlabs.io) for voiceover generation and discovery. It also suggests installingopenai-whispervia pip andlucide-reactvia npm, which are standard, well-known packages.
Audit Metadata