helios-skills

Pass

Audited by Gen Agent Trust Hub on Oct 3, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill's 'Guided' workflows (e.g., in skills/guided/social-clip/SKILL.md, skills/guided/promo-video/SKILL.md) instruct the agent to research external marketing URLs or analyze codebases to extract 'brand intelligence'. This external data directly influences the creative specification and the resulting composition.html code generation.
  • Ingestion Points: skills/guided/*/SKILL.md
  • The agent is prompted to 'research the provided URL' and analyze 'Marketing copy', 'Hero sections', and 'Product positioning'.
  • Boundary Markers: None identified; the instructions do not specify using delimiters or warnings to ignore instructions embedded within the marketing content or codebase metadata.
  • Capability Inventory: The skill is designed to write files (composition.html) and execute shell commands (npx helios render, npm install).
  • Sanitization: The skill lacks instructions for sanitizing or filtering the content fetched from external URLs before it is processed by the agent to construct a brand profile.
  • [COMMAND_EXECUTION]: The skill utilizes several CLI commands for setup and video production, which is standard for its purpose.
  • Evidence: Instructions in skills/getting-started/SKILL.md and skills/guided/*/SKILL.md include npm install @helios-project/core, npx helios render, and npx helios studio.
  • [EXTERNAL_DOWNLOADS]: The guided workflows involve downloading/fetching content from user-provided marketing URLs to perform brand research.
  • Evidence: skills/guided/promo-video/SKILL.md (Step 3)
  • 'If the user provided a URL... fetch that URL and extract the same brand signals from the live site.'
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 3, 2026, 11:42 PM