jianying-draft-video-planning
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill interacts with a local command-line interface tool named
jianying. It executes queries such asjianying capabilities --jsonandjianying doctor --jsonto assess the local environment and ensure the platform supports required editing features. - [EXTERNAL_DOWNLOADS]: The instructions guide the user or agent to install supplementary capabilities using the
npx skills addcommand. These resources (e.g.,jianying-draft-schema,jianying-draft-edit) belong to the same vendor (full-aigc-skills) as the skill author, representing standard modular installation within a trusted ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data, such as media metadata and project goals, to select scenarios and recipes. While this creates a vulnerability surface for indirect injection, the skill implements multiple safety guardrails, including explicit instructions to avoid fictionalizing data and requiring manual user approval at critical decision points.
- Ingestion points: User-provided media facts, channel requirements, and audience information entering the context through
SKILL.mdand scenario templates. - Boundary markers: The skill uses structural JSON inputs for job handovers but lacks high-entropy delimiters (like XML tags) for raw user input.
- Capability inventory: The skill generates project schemas and timeline plans which are then executed by external CLI tools or sibling skills.
- Sanitization: Relies on human-in-the-loop verification checklists and automated capability handshakes before any persistent changes are made.
Audit Metadata