programmatic-video
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill enables the agent to ingest external data such as titles, metrics, and JSON props to dynamically generate video frames. This creates a potential surface for indirect prompt injection where malicious instructions could be embedded in the data processed by the agent.
- Ingestion points: The
MainCompositioncomponent props and the--propsCLI flag described inSKILL.md. - Boundary markers: No delimiters or explicit instructions to ignore embedded commands are present in the provided React templates.
- Capability inventory: The skill utilizes shell command execution via
npxand filesystem writes for the final video output. - Sanitization: No input validation or sanitization logic is implemented for the data-driven content in the example code.
- [COMMAND_EXECUTION]: The skill provides instructions for executing shell commands to preview and render video content.
- Evidence: Shell commands
npx remotion studioandnpx remotion render MainVideo output.mp4are used for video processing. - [EXTERNAL_DOWNLOADS]: The skill utilizes the
remotionpackage, an established framework for programmatic video, which is fetched and executed via thenpxcommand at runtime.
Audit Metadata