epic-fantasy-scifi-spectacle
Pass
Audited by Gen Agent Trust Hub on Oct 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to access and "inspect" finished media (videos and images) from external URLs hosted on well-known services like
x.com(Twitter) andxiaohongshu.com, as well asgoodcase.ai. This is an intended function of the skill used to verify visual styles for prompt engineering. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data from referenced URLs and prompt excerpts, which creates a theoretical attack surface for indirect prompt injection if the external sites were to contain malicious instructions.
- Ingestion points: Reference cases in
references/cases.mdcontaining external links and user-supplied descriptions. - Boundary markers: The workflow mandates the creation of a "reference contract" using Preserve, Replace, and Avoid categories to explicitly filter and define which traits are adopted from the evidence.
- Capability inventory: The skill utilizes image and video inspection tools or browser capabilities to analyze external media.
- Sanitization: The instructions require the agent to distinguish observed evidence from its own recommendations and labels results as "prompt-grounded" if media is inaccessible.
Audit Metadata