understand
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes system utilities such as
gitfor repository history analysis andffmpegfor video encoding through thesubprocessmodule. - [EXTERNAL_DOWNLOADS]: The
build-video.pyscript includes a setup routine to install themanimanimation library from the official Python Package Index (PyPI) into a local virtual environment. - [DATA_EXFILTRATION]: Narration scripts are sent to the ElevenLabs API (
api.elevenlabs.io) to generate audio. The skill documentation notes that this text describes code that may be private. - [DYNAMIC_EXECUTION]: Video explainers are rendered by executing Python code within
scene.pyusing the Manim rendering engine at runtime. - [INDIRECT_PROMPT_INJECTION]: The skill summarizes information from Pull Request discussions and repository files, which could allow malicious instructions embedded in PR comments to influence the agent's summary.
- Ingestion points: Reads Pull Request bodies and comments (via
gh pr view), commit history, and codebase files. - Boundary markers: The skill does not define specific delimiters to separate untrusted repo data from the summarizing instructions.
- Capability inventory: File system writes, command execution (git, ffmpeg, manim), and network access (ElevenLabs).
- Sanitization: No explicit filtering or sanitization is applied to the content retrieved from Pull Requests or commit logs.
Audit Metadata