skills/gsfsss/motiscope/rebuild-site/Gen Agent Trust Hub

rebuild-site

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to execute local Python scripts (mvsetup.py, ingest.py, assetgen.py) and the ffmpeg command-line utility for image processing. These executions are constrained to local scripts and media assets.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data (video frames and a generated analysis report) to identify layout and transcribe copy, which introduces an indirect prompt injection surface.
  • Ingestion points: Video frames and the report.md file containing timeline and layout metadata.
  • Boundary markers: No specific boundary markers or 'ignore' instructions are used when processing the transcribed copy.
  • Capability inventory: The agent has access to Bash, Read, Write, and Edit tools.
  • Sanitization: No explicit sanitization of external content is performed before interpolation into the site plan or code generation.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 10:37 AM