tao-generate-video-reasoning-annotations
Warn
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: MEDIUMDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill supports dynamic loading of Python modules through the
prompts_moduleconfiguration field. - Evidence:
- The
SKILL.mdandreferences/configuration.mdfiles describe using theprompts_moduleparameter to point to custom Python modules (e.g.,prompts_module: "my_package.prompts_traffic"). references/configuration.mdexplicitly notes that the dotted path must resolve and be present on thePYTHONPATH, enabling the execution of arbitrary Python code available in the environment.- [INDIRECT_PROMPT_INJECTION]: The skill possesses a significant surface for indirect prompt injection as it ingests and processes untrusted external data (videos and JSONL metadata) which is then used as context for VLM and LLM reasoning steps.
- Ingestion points:
- The skill reads video files from a directory specified by
video_root. - It ingests metadata from JSONL files provided via
input_jsonl_files. - Boundary markers:
- Prompt templates in
references/prompts_traffic.pyandreferences/prompts_warehouse.pyuse structured tags such as<example>,[Global Caption], and[Detailed Video Description]to delimit data, which provides some mitigation against accidental instruction following. - Capability inventory:
- The skill uses the
Bashtool to execute theauto_labelcommand, which orchestrates the pipeline (Step 0-4). - The pipeline includes steps that generate captions, descriptions, and QA pairs using external model endpoints (Gemini/OpenAI).
- Sanitization:
- There is no evidence of sanitization or filtering of the textual content within the input JSONL files or video metadata before it is interpolated into model prompts.
Audit Metadata