take-on-me
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input (a story "IDEA") and interpolates it into a project brief and subsequent code generation tasks.
- Ingestion points: User-supplied
IDEAstring defined inSKILL.md. - Boundary markers: No explicit boundary markers or "ignore instructions" warnings are utilized during the interpolation of the idea into
brief.md. - Capability inventory: The skill possesses extensive capabilities to write files (
brief.md,index.tsx,shots.ts,cast.ts), execute shell commands via thedapiCLI, and invoke MCP tools for rendering. - Sanitization: The skill does not describe any specific sanitization or validation of the input idea before processing it.
- [DYNAMIC_EXECUTION]: The core functionality of the skill involves the agent generating, modifying, and rendering TypeScript and JSX code based on a provided engine and templates.
- Evidence: The workflow described in
SKILL.md(Step 3: Blocking) involves replacing look tests with real shot tables and character rigs in.tsand.tsxfiles which are then executed by the rendering engine. - [COMMAND_EXECUTION]: The skill makes extensive use of the
dapiCLI and MCP tools to interact with the local environment and the Diffusion Studio application. - Evidence:
SKILL.mdlists tools likeopen,check,capture, andlogs.example/fish-heist/package.jsoncontains scripts formedia probe,grab,listen,whoami, andreportusing thedapicommand. - [EXTERNAL_DOWNLOADS]: The installation instructions reference downloading a repository from a remote source.
- Evidence:
README.mdinstructs users to clonehttps://github.com/diffusionstudio/open-projectsto install the skill.
Audit Metadata