trailer-assets
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external data sources which could contain instructions intended to influence agent behavior.
- Ingestion points: The workflow in SKILL.md reads trailer manifests, reference assets, canon files, and media registries.
- Boundary markers: No specific delimiters or boundary warnings are defined to separate untrusted data from instructions.
- Capability inventory: The skill writes to the local file system (assets.jsonl) and triggers external rendering via ComfyUI.
- Sanitization: No sanitization or validation of ingested content is described in the workflow.
Audit Metadata