short-drama-remake
Pass
Audited by Gen Agent Trust Hub on Sep 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes external document files (e.g., .docx, .pdf, .txt, .md) uploaded by the user, which creates a surface for indirect prompt injection where malicious instructions embedded in the source script could attempt to influence the agent's analysis or output.
- Ingestion points: The
scripts/split_short_drama_source.pyscript reads the raw text from provided files for ingestion into the project structure. - Boundary markers: The skill defines a "Three-Layer Control" model (described in
references/three-layer-control.md) to separate hard project gates (Foundation) from creative implementation (Skeleton/Flesh), and uses[待确认]placeholders for uncertain data. - Capability inventory: The agent has the capability to read and edit project files, execute subprocesses for PDF conversion, and make MCP tool calls to external services.
- Sanitization: The skill employs a deterministic checker (
scripts/remake_gate_checker.py) and a rigorous report-based workflow (SIR, RMR, FGR) to validate data integrity before proceeding to script generation. - [COMMAND_EXECUTION]: The
scripts/split_short_drama_source.pyutility usessubprocess.runto call thepdftotextsystem command for converting PDF documents into readable text. - Evidence:
subprocess.run([pdftotext, str(path), str(out_path)], check=True)inscripts/split_short_drama_source.py. - [DYNAMIC_EXECUTION]: The
scripts/split_short_drama_source.pyscript uses the__import__function to dynamically load optional PDF processing libraries at runtime. - Evidence:
module = __import__(module_name)wheremodule_nameis selected from a static list("pypdf", "PyPDF2").
Audit Metadata