Skills
Navigate
skills/bintzgavin/helios-skills/guided-social-clip/Gen Agent Trust Hub

guided-social-clip

Pass

Audited by Gen Agent Trust Hub on Sep 30, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs external dependencies from the Helios project suite using npm.
  • Evidence: npm install @helios-project/core @helios-project/renderer @helios-project/cli in SKILL.md.
  • [COMMAND_EXECUTION]: The skill executes a CLI tool to render video output from a generated HTML file.
  • Evidence: npx helios render ./composition.html -o output.mp4 in SKILL.md.
  • [INDIRECT_PROMPT_INJECTION]: The skill researches brand identity from user-provided URLs or repository files and uses that data to generate code and creative specifications.
  • Ingestion points: User-provided URLs or repository file content (Step 3).
  • Boundary markers: None present.
  • Capability inventory: npm installation (Step 2), file creation (Step 8), and CLI command execution (Step 9).
  • Sanitization: No sanitization or validation of the extracted brand data is specified.
  • [DYNAMIC_EXECUTION]: The skill generates an HTML file containing JavaScript and CSS at runtime, which is then processed by a renderer.
  • Evidence: Step 8 involves creating composition.html with imported JavaScript modules and animation logic which is later rendered via npx helios.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 30, 2026, 01:44 PM