create-demo-video
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- External Resource Acquisition: The skill provides instructions to install additional components from the author's official GitHub repositories using package management tools. This is a standard procedure to equip the agent with the specialized media processing capabilities required for video editing and audio mastering.
- Data Ingestion Surface: During the storyboarding phase, the skill processes user-provided inputs such as scripts, recordings, and artwork. While this represents a surface where untrusted data enters the agent's context, it is a functional requirement for generating the demo video based on user-supplied content.
- Ingestion points: Processes existing scripts, recordings, artwork, and credits in Step 1 to generate storyboards.
- Boundary markers: No explicit boundary markers or "ignore instructions" delimiters are specified in the workflow.
- Capability inventory: The skill utilizes a suite of media tools (
stories,showrun,aud,unfold,vid) capable of file system operations, media rendering, and command execution. - Sanitization: The instructions do not specify explicit sanitization or filtering logic for the ingested content.
- Local Content Generation: The workflow includes the generation of a local HTML review player (
index.html) to facilitate human review of the final video export. This involves creating a functional playback interface to assist the user in verifying timing, captions, and overall quality.
Audit Metadata