title-sequence-3d
Pass
Audited by Gen Agent Trust Hub on Sep 29, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the
hyperframestool from theheygen-comrepository for 3D rendering tasks usingnpx. - [COMMAND_EXECUTION]: The skill uses
npxto execute commands for adding skill extensions and rendering video sequences. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input, such as title text and scene descriptions, and interpolates it into a build brief for further code generation.
- Ingestion points: User-provided inputs for the title line and scene setting in
SKILL.md. - Boundary markers: Absent; user input is directly embedded into the prompt brief in Step 2.
- Capability inventory: File writing (
index.html) and shell command execution (npx) are triggered by the skill workflow. - Sanitization: No validation or sanitization is applied to user-provided strings before they are used in the generated HTML/JS brief.
Audit Metadata