ai-presenter-video
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data, including topics and script files, which are used to generate video content and narration. This creates a surface where embedded instructions in the input could potentially influence the agent's actions during the production workflow.
- Ingestion points: User-provided
topicstrings andscript_pathfile contents are ingested into thejob.jsonmanifest byscripts/init_job.pyand validated byscripts/preflight.py. - Boundary markers: There are no explicit delimiters or specific instructions for the agent to ignore potentially malicious content within the topic or script data.
- Capability inventory: The skill executes shell commands via
subprocess.run(forffprobeinscripts/preflight.py) and a Bash script (scripts/finalize_delivery.shforffmpeg). It also leverages agent capabilities for remote video and speech generation. - Sanitization:
scripts/init_job.pyperforms slugification for the job ID, andscripts/finalize_delivery.shuses regex validation for the output filename stem. - [COMMAND_EXECUTION]: The skill relies on local command-line tools to process media files and manage the video generation lifecycle.
- Evidence:
scripts/preflight.pyinvokesffprobeto validate the integrity and properties of input images and audio samples. - Evidence:
scripts/finalize_delivery.shexecutesffmpegfor complex video filtering, loudness normalization, and generating contact sheets. - [DYNAMIC_EXECUTION]: The skill manages state and configuration by dynamically generating job manifests from a template.
- Evidence:
scripts/init_job.pyreads a JSON template fromassets/job.template.jsonand populates it with runtime parameters to create a project-specificjob.jsonfile.
Audit Metadata