alterlab-vcd-motion-graphics
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from external sources, creating a potential surface for indirect prompt injection attacks.
- Ingestion points: The agentic protocol instructs the agent to search the web for motion design references and trends, and to read existing project files such as brand guidelines, storyboards, scripts, and audio files from the environment (SKILL.md).
- Boundary markers: The instructions do not define specific delimiters or instructions to treat ingested data as non-executable text, which could allow malicious instructions in processed files to influence agent behavior.
- Capability inventory: The skill utilizes web search capabilities, file reading, and file writing (generating markdown documents like project-motion-spec.md) across its workflow.
- Sanitization: No sanitization, validation, or filtering mechanisms are mentioned for the content retrieved from external files or web search results.
Audit Metadata