film-director
Pass
Audited by Gen Agent Trust Hub on Mar 1, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/validate_creative_artifacts.pyexecutes a shared validation tool viasubprocess.run. The command uses a fixed path to an internal script and handles arguments safely without shell expansion. - [PROMPT_INJECTION]: The skill transforms user input into cinematic plans. It includes safety guidelines to prevent generating harmful content. While the input surface exists, no malicious patterns were observed.
- Ingestion points:
user_requestinsrc/index.js. - Boundary markers: Not used in string interpolation.
- Capability inventory:
subprocess.run(validation scripts), file system access (shared utilities). - Sanitization:
safeTextutility from the shared runtime.
Audit Metadata