create-storyboard-html
Pass
Audited by Gen Agent Trust Hub on Aug 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill requires the execution of a Python script (scripts/render_storyboard.py) to process project files and generate the final HTML storyboard.
- [DATA_EXPOSURE_AND_EXFILTRATION]: The script resolves asset paths relative to a video folder but lacks sandboxing. The SKILL.md file explicitly acknowledges that paths can leak using .. notation. This allows the generated HTML to link to or embed sensitive files from outside the intended directory.
- [INDIRECT_PROMPT_INJECTION]: The skill processes data from JSON fragments which could be manipulated. Ingestion points: JSON files in the _state/ directory. Boundary markers: Absent for the html fragment type. Capability inventory: Reads multiple files and writes a new HTML file. Sanitization: While most fields are escaped, the kind: "html" type explicitly allows raw, unescaped HTML to be injected into the output, creating an XSS surface in the review file.
- [DYNAMIC_EXECUTION]: The script dynamically generates an HTML document and incorporates raw HTML content provided in external JSON fragments without validation.
Audit Metadata