html-explainer-video
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses several scripts (
scripts/render.mjs,scripts/preview.mjs,scripts/words.py, andscripts/check-film.mjs) to execute external system binaries includingffmpeg,ffprobe, andnice. These tools are used for silence detection, media mixing, and video encoding. The commands are executed using shell-safe list-based arguments. - [INDIRECT_PROMPT_INJECTION]: The skill contains an attack surface for indirect prompt injection via
scripts/read-look.mjs. - Ingestion points: External URLs provided by the user to scrape branding information (CSS, fonts, and metadata).
- Boundary markers: The instructions in
SKILL.mddirect the agent to cross-reference claims against the product's site and report contradictions, providing a layer of manual verification. - Capability inventory: The skill has the capability to render high-fidelity video (
render.mjs) and interact with an external editor via the Fil MCP (references/fil-editor.md). - Sanitization:
read-look.mjsextracts values likefontFamilyandtextTransformfrom the browser context, though it normalizes colors and dimensions. - [EXTERNAL_DOWNLOADS]: The skill requires external dependencies including
playwrightandffmpeg. It also references an external Model Context Protocol (MCP) hosted atfil.design/for-agentsfor final video assembly. These are documented as standard requirements for the skill's media generation functionality.
Audit Metadata