blitzreels-generation
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
blitzreelsCLI tool to execute operations such as retrieving credit pricing (blitzreels credits pricing), checking generation options (blitzreels generate videos --options), and creating media assets. - [EXTERNAL_DOWNLOADS]: Fetches dynamic capability definitions and service schemas from the official vendor domain at
https://www.blitzreels.com/api/capabilities.jsonto ensure requests match current API requirements. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted user content, such as 'authored narration' and 'production briefs' (found in
SKILL.mdandreferences/faceless-prompting.md), which are interpolated into visual and audio generation prompts. While no explicit boundary markers are defined for the prompt construction, the workflow requires human approval of plans and costs before generation, providing a manual oversight layer. Capabilities include network operations to the BlitzReels API and CLI execution. - [DYNAMIC_EXECUTION]: Invokes local CLI binaries via subprocess calls to perform generation tasks. The instructions include shell-quoting patterns (
--prompt $'...') to handle multiline user input safely within the command-line interface.
Audit Metadata