animate
Warn
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The
scripts/render_video.pyscript implements an automated fixup loop. If a Manim render fails, the script sends the source code and error traceback to a model, receives a code patch, applies it to the scene file, and re-executes the render command. - [DYNAMIC_EXECUTION]: The test suite in
tests/test_scene_templates.pyutilizesexec()andcompile()to execute and verify the correctness of generated animation source code against a stub module. - [COMMAND_EXECUTION]: The skill makes extensive use of
subprocess.run()to invoke system binaries such asmanimfor video rendering, andffmpegandffprobefor video processing, duration verification, and audio overlay. - [EXTERNAL_DOWNLOADS]: The
scripts/fetch_assets.pyutility downloads visual assets from IconFinder's official API for inclusion in generated animations. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a significant attack surface for indirect injection as it processes user-supplied configuration data (JSON/TOML) in
scripts/build_scene.pyto drive Python code generation. Evidence of this chain includes: - Ingestion points: User-provided config files are loaded in
scripts/build_scene.pyand passed to the generation logic. - Boundary markers: The Manim templates in
references/templates/use explicit# ── Configand rule markers to delimit the injected configuration block. - Capability inventory: The skill possesses capabilities for subprocess execution (manim, ffmpeg, ffprobe) across multiple scripts and network access for asset fetching.
- Sanitization: The
scripts/scene_templates.pymodule attempts to sanitize user input by processing text throughrepr()when generating Python string literals.
Audit Metadata