krea-motion
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill incorporates various shell commands using
ffmpegfor essential video processing tasks such as creating contact sheets for visual inspection, performing scene detection to verify cuts, and normalizing video formats for final assembly. These commands are standard for the skill's intended use in creative video production. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted user inputs, including product images and creative briefs, to generate complex prompts for external video models. This constitutes a potential indirect injection surface. The skill provides effective mitigation strategies, including: (1) Ingestion points: User-supplied images and text briefs are analyzed at the start of the cinematic-shot workflow in workflows/cinematic-shot.md; (2) Boundary markers: The agent is instructed to use structured prompt blocks like Motion split, World, and Constraints (reassert) to delimit different types of instructions; (3) Capability inventory: The skill uses ffmpeg for local processing and platform-native model tools; (4) Sanitization: The instructions mandate a vision QA step where the agent must inspect the source image for quality before proceeding.
Audit Metadata