motion-graphics-director
Pass
Audited by Gen Agent Trust Hub on Sep 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on system commands including
ffmpeg,ffprobe, andchromium(via Remotion) to process video and audio. These operations are core to the motion graphics production purpose of the skill. - [EXTERNAL_DOWNLOADS]: The
transcribe.shscript sends audio data to Groq's API (api.groq.com) to generate word-level timestamps. This is a declared functionality of the skill using a well-known AI service provider. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data such as video audio and transcripts. While instructions in the audio could theoretically attempt to influence the agent, the skill includes manual verification steps and specific checks for transcript hallucinations to mitigate these risks.
- [DYNAMIC_EXECUTION]: The rendering pipeline uses Remotion's bundling and rendering capabilities to execute React code at runtime. This is the intended mechanism for creating the art-directed video output.
Audit Metadata