gitframes-render

Pass

Audited by Gen Agent Trust Hub on Oct 5, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the installation and import of the gitframes package from the npm registry, which is the core dependency for its rendering capabilities.\n- [COMMAND_EXECUTION]: Instructions involve executing shell commands for development workflows, specifically npx tsc for typechecking, tsx for running render scripts, and ffmpeg or ffprobe for inspecting output media files.\n- [DYNAMIC_EXECUTION]: The startPreview function facilitates dynamic execution by hosting a local server to run composition code within a browser environment for real-time visual feedback.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes external composition specifications, which represents an indirect prompt injection surface.\n
  • Ingestion points: Reads composition logic and specifications from modules like film.ts referenced in SKILL.md.\n
  • Boundary markers: The skill explicitly recommends a 'Verification Ladder' and uses CompositorProgramSchema to define expected data structures.\n
  • Capability inventory: Includes file system operations (fs.writeFile, fs.mkdir) in the render script and local network hosting via startPreview.\n
  • Sanitization: Implements runtime validation using CompositorProgramSchema.safeParse and static analysis via TypeScript (npx tsc) to ensure spec conformance.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 5, 2026, 10:48 AM