mix-and-match
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a local Python helper script (
scripts/mix_matrix.py) to generate concept scaffolds from creative data. This script is distributed as part of the skill package and performs deterministic operations using standard libraries. A separate test script (scripts/test_mix_matrix.py) also usessubprocess.runto execute unit tests on the helper script, which is a standard development practice. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and analyze external references (e.g., videos, reels, or descriptions) provided by the user. These references represent a potential surface for indirect prompt injection, where malicious instructions embedded in the reference content could attempt to influence the agent's output.
- Ingestion points: The
IntakeandReference genomesections ofSKILL.mddefine how the agent collects and deconstructs 2-6 primary references and up to 3 wildcard references. - Boundary markers: The skill employs a structured gene schema (
references/reference-gene-schema.md) to categorize observations and transferable principles, which helps delimit the data being processed. - Capability inventory: The agent uses its local environment to create a
gene-pool.jsonfile and executes themix_matrix.pyscript. The final output is amix-brief.mddocument handed to amotion-directorskill. - Sanitization: No explicit content filtering is performed on the text descriptions or metadata extracted from the user-supplied references.
Audit Metadata