short-drama-director
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-supplied screenplays and scripts to generate production assets and model prompts.
- Ingestion points: Multiple files including
SKILL.md,references/asset-first-pipeline.md, andreferences/screenplay-gate-engine.mddefine the workflow for ingesting external script data. - Boundary markers: Absent. While the skill defines rigid structural sections, it lacks explicit instructions for the AI to ignore or neutralize potentially malicious instructions embedded within the processed screenplay data.
- Capability inventory: The skill possesses capabilities for file system operations (via the agent) and local command execution through included scripts.
- Sanitization: No explicit sanitization or filtering logic for untrusted text data is provided in the instruction set.
- [DYNAMIC_EXECUTION]: The skill includes Python scripts that perform local execution or generate dynamic content.
- Subprocess Execution: The script
scripts/check_package.pyusessubprocess.run()to execute another local script,scripts/validate_prompt.py, as part of its integrity check routine. - Script Generation: The script
scripts/build_board_lite.pydynamically compiles markdown data into a single-file HTML storyboard containing embedded JavaScript and CSS.
Audit Metadata