guided-video-recipes
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to manage the video generation and verification workflow.
- Evidence:
SKILL.mddirects the agent to generate random seeds using/dev/urandomand to execute video processing tasks usingnpxcommands for the@helios-project/clitool. - [EXTERNAL_DOWNLOADS]: The skill fetches external tools and resources at runtime to perform its primary functions.
- Evidence:
SKILL.mdusesnpxto download and run the latest version of@helios-project/cli. Reference HTML files in thereferences/genres/directory (e.g.,era-timeline.html,kinetic-type.html) fetch fonts from Google Fonts (fonts.googleapis.com). - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data which is interpolated into video briefs and subsequently handled by the agent, creating a surface for potential instruction injection.
- Ingestion points:
references/brief.mddefines anINPUTSsection where users provide names, facts, and exact on-screen copy. - Boundary markers: The brief utilizes a structured template and "LOCKED COPY" directives to define context, though it relies on the agent's adherence to instructions rather than technical sanitization.
- Capability inventory: The skill has the capability to write files (video HTML) and execute shell commands (
npxrender/verify) across all identified scripts. - Sanitization: The brief includes a "BANNED" list to restrict specific visual styles and requires all copy to be sourced from a facts file, reducing the risk of arbitrary content generation.
Audit Metadata