motion-film
Warn
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill dynamically loads and executes JavaScript files from the
films/andpieces/directories within a headless Chromium instance. This is done viadocument.writeinassets/film.htmland by bundling files into a single bundle script inscripts/film-render.mjsandscripts/film-score.mjswhich is subsequently executed in the browser context. - [COMMAND_EXECUTION]: The scripts
film-render.mjsandfilm-score.mjsexecute external commands usingspawn,execSync, andexecFileSync. Specifically, they invokeffmpegfor video encoding/audio muxing andpython3to locate theimageio_ffmpegexecutable using a dynamic command string. - [EXTERNAL_DOWNLOADS]: The rendering scripts include logic to automatically import and potentially trigger the installation of the
playwrightpackage and its Chromium browser dependencies vianpmandnpxcommands if they are missing from the environment. - [INDIRECT_PROMPT_INJECTION]: The skill processes external, potentially untrusted brief files (
FILM-BRIEF.md,SCORE-BRIEF.md) which are used to instruct sub-agents. There is a lack of explicit sanitization or boundary markers when these files are interpolated into the sub-agent prompts defined inreferences/agent-prompts.md, creating a surface for indirect instructions to influence the agent.
Audit Metadata