scene-beat-designer
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local command-line interface,
renku, to perform project operations, resolve scenes, and manage narrative beats. These operations (e.g.,renku screenplay beats create,renku screenplay beats apply) are necessary for the skill's primary function of designing screenplay beats. - [INDIRECT_PROMPT_INJECTION]: The skill acts on data retrieved from external project files and scene contexts via the
renkuCLI. While this presents a potential surface for indirect injection if project content is untrusted, the skill employs structured data handling (JSON) and strict requirements for system-generated durable IDs, which mitigates risk. - Ingestion points: Data is ingested from commands like
renku screenplay beats contextandrenku screenplay beats show(SKILL.md). - Boundary markers: The skill uses
--jsonflags for structured output, though explicit narrative delimiters are not specified for the creative descriptions. - Capability inventory: The skill can execute shell commands through the
renkuCLI and coordinate with amedia-producertool (SKILL.md). - Sanitization: Instructions explicitly forbid the agent from inventing IDs and require validation before mutation (SKILL.md, Non-Negotiables).
Audit Metadata