loop-cover
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the agent to execute shell commands using
ffmpegto encode GIF files and extract raw video frames for analysis. - [DYNAMIC_EXECUTION]: The skill utilizes
python3 -cto run a script defined in the instructions for measuring loop quality. It also directs the agent to generate and execute custom animation logic in code based on user-specified movement parameters. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted external data which influences the code generated and executed by the agent.
- Ingestion points: User-provided HTML covers and textual descriptions of movement styles and elements.
- Boundary markers: Absent. The instructions do not provide delimiters or warnings to ignore instructions embedded within user-provided HTML or descriptions.
- Capability inventory: Shell command execution via
ffmpegand script execution viapython3. - Sanitization: Absent. There is no validation or escaping logic defined for the external content before it is processed or used in code generation.
Audit Metadata