vox
Pass
Audited by Gen Agent Trust Hub on Oct 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill automates the installation of the 'uv' package manager by piping a remote installation script to the shell. This is a standard installation method for this tool from a well-known provider.\n
- Evidence: The command
curl -LsSf https://astral.sh/uv/install.sh | shinSKILL.md.\n- [EXTERNAL_DOWNLOADS]: The skill downloads several established software dependencies, including the Puppeteer browser automation library, the rembg background removal tool, and the Codex CLI from official registries.\n - Evidence:
npm i puppeteer@24,uvx --from \"rembg[cpu,cli]\", andnpm i -g @openai/codexinSKILL.mdandREADME.md.\n- [COMMAND_EXECUTION]: The skill uses shell commands to coordinate media processing tasks using tools like ffmpeg, Node.js, and Codex as part of its core functionality.\n - Evidence:
allowed-toolsinSKILL.mdlistsBash(ffmpeg *),Bash(node *), andBash(codex *).\n- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied animation descriptions which are used to generate prompts for an image generation model, creating a surface for indirect instructions.\n - Ingestion points: The
<animation idea>argument inSKILL.md.\n - Boundary markers: The skill uses a structured prompt template defined in
references/look.mdto wrap the user's input.\n - Capability inventory: The agent has access to file writing and media processing tools like ffmpeg and rembg.\n
- Sanitization: The instructions direct the agent to manually inspect generated images for unexpected content like logos or text.
Audit Metadata