video
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to analyze external video content and social media posts to reverse-engineer editing styles, creating a surface for indirect prompt injection.
- Ingestion points: External video transcripts and metadata fetched using
watch-videoorsocial-fetchtools (referenced inreferences/edit-anatomy.md). - Boundary markers: The prompt instructions in
SKILL.mdandreferences/edit-anatomy.mddo not include specific delimiters or instructions to ignore embedded commands within the fetched transcripts. - Capability inventory:
SKILL.mdguides the use of programmatic video frameworks like Hyperframes and Remotion which involve script execution and rendering. - Sanitization: There is no explicit requirement in the skill instructions to sanitize or filter external text before processing it for editing patterns.
- [COMMAND_EXECUTION]: The skill recommends standard shell commands for initializing video projects, including
npm install hyperframesandnpx create-video@latest. These are legitimate commands for the stated purpose of the skill.
Audit Metadata