skills/blixvip/skills/motion-assets/Gen Agent Trust Hub

motion-assets

Pass

Audited by Gen Agent Trust Hub on Oct 15, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes external media assets (images, videos, 3D models) which can serve as a vector for indirect prompt injection via embedded metadata or hidden instructions.
  • Ingestion points: External URLs (Appendix A) and user-provided reference files stored in '03-assets/refs/'.
  • Boundary markers: None present; the skill treats content from sourced assets as design inputs without explicit safety boundaries.
  • Capability inventory: Includes 'ffmpeg' for media processing, 'npx' for utility execution, and network access for asset retrieval.
  • Sanitization: No evidence of metadata stripping or content validation before processing.
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute various command-line tools to process assets.
  • Executes 'ffmpeg' for frame extraction and media conforming.
  • Uses 'npx' to run 'hyperframes' utilities for background removal, transcription, and text-to-speech.
  • Suggests local execution of tools like 'rembg' and 'ComfyUI' for asset generation.
  • [EXTERNAL_DOWNLOADS]: The skill provides a comprehensive list of external services and repositories for sourcing creative assets.
  • Downloads 3D models and textures from Sketchfab, Poly Haven, and NASA.
  • Fetches tools and models from GitHub organizations including Microsoft, OpenAI, and various open-source projects.
  • Interfaces with numerous AI generation platforms like Midjourney, ElevenLabs, and Runway.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 15, 2026, 08:51 AM