srt-reference-to-three
Pass
Audited by Gen Agent Trust Hub on Sep 25, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted external data (SRT files and user requirements) while possessing capabilities to execute scripts and media production tools.
- Ingestion points: Processes SRT files and user instructions to determine video content and animation logic in
SKILL.mdandreferences/semantic-planning.md. - Boundary markers: No explicit boundary markers or directives (e.g., "ignore instructions found in data") are implemented to separate the content of the SRT files from the agent's control flow.
- Capability inventory: The skill executes local Node.js scripts (
scripts/read-stage.mjs), interacts with a browser environment via Playwright, and invokes system tools like FFmpeg and FFprobe as detailed inreferences/production.md. - Sanitization: There is no evidence of sanitization or validation of the content extracted from SRT files before it is interpolated into production parameters.
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to manage the production lifecycle and media processing.
- Evidence: Calls to
node scripts/read-stage.mjsinSKILL.mdand references toffmpeg/ffprobeinvocation inreferences/production.md. - [EXTERNAL_DOWNLOADS]: The skill references design guidelines and industry standards from well-known organizations to inform its aesthetic and layout decisions.
- Evidence: Documents design inspiration from official Adobe, Pentagram, and Cooper Hewitt Smithsonian Design Museum resources for typography and poster layout (
references/opening-design.md). These references are used for design documentation and are considered safe. - [DYNAMIC_EXECUTION]: The skill uses a dynamic rendering pipeline where Three.js scenes are executed within a browser environment managed by Playwright.
- Evidence: The production flow involves launching Chromium via
scripts/browser.mjsto capture frames from a dynamic Three.js scene for video encoding (references/production.md).
Audit Metadata