trailer-master
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests external data in the form of trailer plans which could serve as a vector for malicious instructions.
- Ingestion points: Step 1 in
SKILL.mdreadsTRL-###trailer plans, timelines, and audio mix data. - Boundary markers: The instructions lack specific delimiters or guardrail prompts to ignore embedded instructions within the ingested media plans.
- Capability inventory: The skill utilizes
audio-master,scripts/render_timeline.py,delivery-qc,asset-approval, andscripts/promo_delivery.pyto process the data. - Sanitization: There is no evidence of content validation or sanitization for the trailer plans before they influence script execution.
- [COMMAND_EXECUTION]: The workflow relies on the execution of multiple local scripts and system-level binaries.
- Evidence: The skill calls
audio-master,scripts/render_timeline.py,delivery-qc,asset-approval, andscripts/promo_delivery.pyas part of its core operations.
Audit Metadata