srt-reference-to-three

Pass

Audited by Gen Agent Trust Hub on Sep 25, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it ingests and processes untrusted external data (SRT files and user requirements) while possessing capabilities to execute scripts and media production tools.
  • Ingestion points: Processes SRT files and user instructions to determine video content and animation logic in SKILL.md and references/semantic-planning.md.
  • Boundary markers: No explicit boundary markers or directives (e.g., "ignore instructions found in data") are implemented to separate the content of the SRT files from the agent's control flow.
  • Capability inventory: The skill executes local Node.js scripts (scripts/read-stage.mjs), interacts with a browser environment via Playwright, and invokes system tools like FFmpeg and FFprobe as detailed in references/production.md.
  • Sanitization: There is no evidence of sanitization or validation of the content extracted from SRT files before it is interpolated into production parameters.
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to manage the production lifecycle and media processing.
  • Evidence: Calls to node scripts/read-stage.mjs in SKILL.md and references to ffmpeg/ffprobe invocation in references/production.md.
  • [EXTERNAL_DOWNLOADS]: The skill references design guidelines and industry standards from well-known organizations to inform its aesthetic and layout decisions.
  • Evidence: Documents design inspiration from official Adobe, Pentagram, and Cooper Hewitt Smithsonian Design Museum resources for typography and poster layout (references/opening-design.md). These references are used for design documentation and are considered safe.
  • [DYNAMIC_EXECUTION]: The skill uses a dynamic rendering pipeline where Three.js scenes are executed within a browser environment managed by Playwright.
  • Evidence: The production flow involves launching Chromium via scripts/browser.mjs to capture frames from a dynamic Three.js scene for video encoding (references/production.md).
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 25, 2026, 02:15 PM