manim-video
Fail
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: HIGHPRIVILEGE_ESCALATIONCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The
SKILL.mdfile provides installation instructions that require the use ofsudoto install system-level dependencies such aslibcairo2-dev,libpango1.0-dev, andtexlive-latex-extra. - [COMMAND_EXECUTION]: The production pipeline involves executing various command-line tools such as
manim,ffmpeg,ffprobe, andpdflatexto render and process video content. - [DYNAMIC_EXECUTION]: The skill documentation in
references/rendering.mdincludes examples of generating and executing Python code dynamically using shell heredocs. The core rendering process also executes Python code generated for Manim scenes. - [INDIRECT_PROMPT_INJECTION]: The skill processes user concepts to generate and execute Python code, presenting an injection risk. 1. Ingestion points: User topics and technical concepts provided in the planning phase. 2. Boundary markers: No explicit delimiters or instructions are provided to the agent to separate user data from generated code logic. 3. Capability inventory: The skill possesses the ability to execute code via the
manimCLI and run arbitrary system commands. 4. Sanitization: There is no documentation of validation or sanitization of input concepts before they are used to generate scene scripts or narration.
Recommendations
- AI detected serious security threats
Audit Metadata