Skills
Navigate
skills/ar9av/framesmith/blue-story-film/Gen Agent Trust Hub

blue-story-film

Fail

Audited by Gen Agent Trust Hub on Oct 26, 2026

Risk Level: HIGHEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [REMOTE_CODE_EXECUTION]: The rasterize_svg function in scripts/framesmith/media.py downloads SVG files from external domains such as thesvg.org and cdn.jsdelivr.net and renders them using a headless Chromium instance. The process uses the --no-sandbox flag, which disables essential security isolation. This creates a high risk of remote code execution if a malicious SVG is processed.\n- [COMMAND_EXECUTION]: The skill uses subprocess.run and subprocess.Popen to execute ffmpeg, ffprobe, and chromium for media processing. Executing these tools on external or user-provided content without robust sanitization increases the attack surface.\n- [EXTERNAL_DOWNLOADS]: The skill fetches resources from external sources at runtime, including api.openai.com (TTS and images), cdn.jsdelivr.net (Lucide icons), thesvg.org (brand icons), and raw.githubusercontent.com.\n- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from brief.json and assets.json to generate video content and prompts for AI models.\n
  • Ingestion points: brief.json and assets.json files loaded by the main script.\n
  • Boundary markers: None.\n
  • Capability inventory: File system access, network operations, and command execution (ffmpeg, chromium).\n
  • Sanitization: None.
Recommendations
  • HIGH: Downloads and executes remote code from: unknown (check file) - DO NOT USE without thorough review
  • AI detected serious security threats
Audit Metadata
Risk Level
HIGH
Analyzed
Oct 26, 2026, 10:19 AM