storytelling

Pass

Audited by Gen Agent Trust Hub on Sep 15, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the genmedia CLI tool for media generation tasks, including model discovery, metadata retrieval, and executing generation jobs.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied narrative elements and media references to construct prompts for AI models, creating a potential surface for indirect prompt injection.
  • Ingestion points: User-provided inputs such as subject descriptions, story beats, and local paths to source media (images/audio) found in the Inputs to collect and Shot planning sections.
  • Boundary markers: The skill lacks explicit delimiters or warnings to ignore instructions embedded within user data.
  • Capability inventory: The skill uses genmedia run for network-based API calls and genmedia status --download to write files to the local file system.
  • Sanitization: There are no instructions for sanitizing or validating user-provided strings before they are used in commands or prompts.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 15, 2026, 01:51 PM