alterlab-cdm-animation-previz
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process external content from web searches and user-provided project files (e.g., scripts and concept art). This creates a surface for indirect prompt injection where malicious instructions hidden in external data could influence the agent's behavior.\n
- Ingestion points: Web search results and local project files (SKILL.md Workflow section).\n
- Boundary markers: None identified; the skill lacks specific delimiters or instructions to ignore embedded commands in the source data.\n
- Capability inventory: The agent has the ability to read and write files and perform web searches.\n
- Sanitization: No explicit sanitization or validation of the external content is performed before processing.
Audit Metadata