video
Pass
Audited by Gen Agent Trust Hub on Aug 13, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill describes a workflow for reverse-engineering video styles by ingesting and analyzing untrusted external content, creating an indirect prompt injection attack surface.\n
- Ingestion points: The
watch-videoandsocial-fetchtools are used inreferences/edit-anatomy.mdto extract transcripts, on-screen text, and visual frames from external social media URLs.\n - Boundary markers: The instructions do not include specific delimiters or directives to the agent to treat external text as untrusted or to ignore embedded instructions within that content.\n
- Capability inventory: The skill has the ability to install software via
npm, generate executable code in HTML and React for programmatic video frameworks, and interact with external APIs such as HeyGen.\n - Sanitization: There is no evidence of filtering or sanitizing the extracted text or transcript data before it is incorporated into the agent's decision-making process for creating edit beat sheets.\n- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation and use of external code packages.\n
- The instructions provide commands like
npm install hyperframesandnpx create-video@latestto set up production environments.\n - These downloads target well-known and recognized service providers within the video technology ecosystem.
Audit Metadata