synthetic-ui-demo
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes several standard command-line tools to perform its tasks, including
gitfor accessing repository content,npx remotionfor frame rendering,ffmpegfor image processing, and local Python scripts (voiceover.py,qc.py) for audio and quality control. These operations are consistent with the skill's objective of generating video demos from code.\n- [INDIRECT_PROMPT_INJECTION]: The skill's methodology involves reading external data such as application source code, localization files, and icon metadata. This creates an indirect prompt injection surface where content from the analyzed repository could theoretically influence the agent's behavior. However, the instructions are scoped to extracting specific UI elements and strings for visual reconstruction.
Audit Metadata