film-director

Pass

Audited by Gen Agent Trust Hub on Mar 1, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/validate_creative_artifacts.py executes a shared validation tool via subprocess.run. The command uses a fixed path to an internal script and handles arguments safely without shell expansion.
  • [PROMPT_INJECTION]: The skill transforms user input into cinematic plans. It includes safety guidelines to prevent generating harmful content. While the input surface exists, no malicious patterns were observed.
  • Ingestion points: user_request in src/index.js.
  • Boundary markers: Not used in string interpolation.
  • Capability inventory: subprocess.run (validation scripts), file system access (shared utilities).
  • Sanitization: safeText utility from the shared runtime.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 1, 2026, 09:55 AM