helios-skills
Pass
Audited by Gen Agent Trust Hub on Oct 3, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's 'Guided' workflows (e.g., in
skills/guided/social-clip/SKILL.md,skills/guided/promo-video/SKILL.md) instruct the agent to research external marketing URLs or analyze codebases to extract 'brand intelligence'. This external data directly influences the creative specification and the resultingcomposition.htmlcode generation. - Ingestion Points:
skills/guided/*/SKILL.md - The agent is prompted to 'research the provided URL' and analyze 'Marketing copy', 'Hero sections', and 'Product positioning'.
- Boundary Markers: None identified; the instructions do not specify using delimiters or warnings to ignore instructions embedded within the marketing content or codebase metadata.
- Capability Inventory: The skill is designed to write files (
composition.html) and execute shell commands (npx helios render,npm install). - Sanitization: The skill lacks instructions for sanitizing or filtering the content fetched from external URLs before it is processed by the agent to construct a brand profile.
- [COMMAND_EXECUTION]: The skill utilizes several CLI commands for setup and video production, which is standard for its purpose.
- Evidence: Instructions in
skills/getting-started/SKILL.mdandskills/guided/*/SKILL.mdincludenpm install @helios-project/core,npx helios render, andnpx helios studio. - [EXTERNAL_DOWNLOADS]: The guided workflows involve downloading/fetching content from user-provided marketing URLs to perform brand research.
- Evidence:
skills/guided/promo-video/SKILL.md(Step 3) - 'If the user provided a URL... fetch that URL and extract the same brand signals from the live site.'
Audit Metadata