video-producer
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill identifies an attack surface by processing natural language video briefs and user arguments to generate narrative plans and React code for video scenes.
- Ingestion points: Processes user-provided video briefs and arguments (referenced as
$ARGUMENTSinSKILL.md) to define scene content and structure. - Boundary markers: The instructions do not define specific delimiters or "ignore instructions" warnings for the user-supplied content.
- Capability inventory: The skill has the capability to execute shell commands via
npx remotion stillandnpx remotion renderacross various scripts (referenced inSKILL.mdandrules/scene-evaluator.md). - Sanitization: No explicit sanitization, validation, or escaping of the user-provided text is described before it is interpolated into code templates.
- [COMMAND_EXECUTION]: The skill utilizes standard framework commands to perform its core functions.
- Evidence: Executes
npx remotion stillin Phase 4b to capture scene previews andnpx remotion renderin Phase 5 to generate final video files. - [EXTERNAL_DOWNLOADS]: The skill references and uses well-known industry libraries and tools.
- Packages: Dependencies include
remotion,gsap, and@remotion/transitions, which are standard for web-based animation and video production. - Note: These resources are recognized as part of the intended functionality and originate from well-known sources.
- [DYNAMIC_EXECUTION]: The skill involves the runtime generation and execution of code as its primary purpose.
- Process: React components and configuration files are generated dynamically from narrative templates and then executed by the Remotion engine during preview and rendering phases.
Audit Metadata