oma-video
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external CLI tools to perform media operations.
- Evidence:
resources/mpt/driver.pyinvokesffmpegviasubprocess.runto generate synthetic video clips. Arguments are constructed from fixed values and resolution parameters. - Evidence:
resources/strudel/render.mjsspawns a headless Chrome/Chromium process usingnode:child_processto host the music rendering environment. - [DYNAMIC_EXECUTION]: The music generation component evaluates code at runtime.
- Evidence:
resources/strudel/render.mjsreads pattern code from an external file and executes it within the headless browser context using the Chrome DevTools Protocol (Runtime.evaluate). - Evidence:
resources/strudel/page.htmlcontains the logic to receive and evaluate Strudel patterns usingwindow.strudel.evaluate. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input to drive a complex generation pipeline.
- Ingestion points: User-provided text "briefs" are accepted via the
oma video generatecommand as described inSKILL.md. - Boundary markers: The skill relies on formatting guidance in
resources/prompt-tips.mdand usesrender-spec.jsonas a deterministic bus to separate asset generation from rendering. - Capability inventory: The skill can write files to the local workspace, execute subprocesses (ffmpeg, Chrome), and invoke other provider tools for voice, images, and slides.
- Sanitization:
resources/execution-protocol.mdspecifies that output paths must be restricted to the current working directory ($PWD) and that URL query/hash tokens must be masked in logs.
Audit Metadata