motion-graphics
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill generates video scripts and assets by analyzing content captured from external applications (iOS, Android, Web, and macOS).
- Ingestion points: Content is ingested from user-provided briefs and automated screenshots/recordings of external applications as defined in
references/capture.md. - Boundary markers: No explicit delimiters or instructions are provided to the agent to ignore potentially malicious commands embedded within the UI text of the applications being captured.
- Capability inventory: The skill has the capability to write files (
writeFile), execute shell commands (spawnforffmpeg,adb,xcrun), and control browser environments via Playwright. - Sanitization: There is no evidence of sanitization or filtering of text extracted from application UIs before it is interpolated into the generated video composition.
- [EXTERNAL_DOWNLOADS]: The skill automates the installation of the
playwrightpackage and its associated Chromium browser engine usingnpm installandnpx playwright install. These components are fetched from trusted Microsoft-maintained registries to provide the rendering environment. - [COMMAND_EXECUTION]: The skill utilizes several command-line tools for media processing and device interaction, including
ffmpegfor video encoding,xcrun simctlfor iOS simulation, andadbfor Android interaction. These tools are invoked via thespawnmethod inengine/render.mjsand through explicit instructions inreferences/capture.md. - [DYNAMIC_EXECUTION]: The core rendering logic involves generating a
motion.htmlcomposition which is then executed within a headless browser context. Theengine/render.mjsscript uses Playwright'spage.evaluateto programmatically drive the animation sequence, representing a controlled dynamic execution pattern necessary for the skill's functionality.
Audit Metadata