effectcraft-credits-roll
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides detailed instructions for the agent to execute the
effectcraft-clitool to manage video compositions, layers, and keyframes. - [DYNAMIC_EXECUTION]: A Python script is included in
references/craft-methods.mdthat dynamically constructs command-line arguments by reading from a local JSON file (references/craft-steps.json) and executes them viasubprocess.run. - [INDIRECT_PROMPT_INJECTION]: The skill defines a surface where structured data from
craft-steps.jsonis used to drive agent actions; however, as these files are part of the skill package and the instructions explicitly warn the agent to verify all inputs, the risk is minimal.
Audit Metadata