video-storyboard
Pass
Audited by Gen Agent Trust Hub on Jul 30, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with the Google Gemini API to generate images for storyboards. • Evidence: Uses curl to call https://generativelanguage.googleapis.com. • The destination is a well-known and trusted service provider.
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection by processing external scripts. • Ingestion points: Visual descriptions are extracted from script input, such as from the video-scriptwriter skill. • Boundary markers: Absent; there are no delimiters to isolate the script content from the generation instructions. • Capability inventory: The skill has the ability to perform network requests via curl and write image files to the local file system. • Sanitization: No input filtering or escaping is applied to the script content before it is interpolated into the API prompt.
Audit Metadata