genmedia-workflow
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data from users, which creates a standard surface for indirect prompt injection where instructions embedded in source assets might influence downstream AI model behavior.
- Ingestion points: Defined in
SKILL.md(source assets like transcripts and brand guides) andreferences/node-rules.md(the 'extractor' node which converts assets into prompts). - Boundary markers: The skill does not explicitly instruct the agent to use delimiters or specific safety warnings to prevent the agent from obeying instructions found within user-provided assets.
- Capability inventory: The skill utilizes the
genmediaCLI to perform network-based API calls (genmedia run) and write output files to the local disk (genmedia status --download). - Sanitization: No explicit instructions are provided for sanitizing or filtering user-provided text before it is interpolated into prompts for generation nodes.
- [COMMAND_EXECUTION]: The skill's primary functionality is built around the execution of the
genmediaCLI. These commands are used for model discovery, schema inspection, asset uploading, and media generation. - The
genmediaCLI is a tool associated with the skill's authoring community, and its use is the primary stated purpose of the skill.
Audit Metadata