video-creation-collaborator
Pass
Audited by Gen Agent Trust Hub on Jul 27, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill defines a structured workflow that involves the execution of various local Python scripts to process media assets.
- Evidence:
SKILL.mdinstructs the agent to run scripts such aspython scripts/image_generator.py,python scripts/audio_generator.py, andpython scripts/video_compositor.py. - [PROMPT_INJECTION]: The multi-stage agent pipeline (11 distinct roles) processes user-provided product information to generate scripts and visual descriptions. This architecture is susceptible to indirect prompt injection if user inputs contain adversarial instructions designed to influence downstream agents.
- Evidence: The '文案创作师智能体' in
references/agent-prompts.mdtakes product category, selling points, and target audience as direct inputs, which then flow into subsequent stages like storyboarding and directing. - [EXTERNAL_DOWNLOADS]: The skill is designed to interface with external AI service providers for media generation.
- Evidence:
scripts/image_generator.pyandscripts/audio_generator.pycontain code placeholders (e.g.,generate_single_image,download_image) for interacting with external APIs like Stable Diffusion or Azure Speech, intended to download generated assets during the workflow.
Audit Metadata