animation-export-presets
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes external binaries including
ffmpeg,ffprobe, andnpx remotionusing thesubprocess.runmethod withinscripts/render.pyandscripts/check_output.py. Execution follows security best practices by utilizing list-based arguments and ensuringshell=Falseis used, mitigating command injection vectors. Command parameters are primarily sourced from a bundledassets/presets.jsonfile or derived from project-local configuration files. - [EXTERNAL_DOWNLOADS]: The
assets/presets.jsonfile contains reference links to official documentation from well-known services including LinkedIn, Microsoft, and Remotion. These external references provide delivery specifications. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from project files to configure its rendering and checking logic. 1. Ingestion points:
storyboard.jsonandanimation.config.jsonare read from the project directory. 2. Boundary markers: Absent. 3. Capability inventory: Execution offfmpegandnpxwith parameters derived from these files. 4. Sanitization: The Python scripts apply type validation and casting (e.g.,int()forfps,width, andheight) to values retrieved from the JSON configuration files before they are used in command construction.
Audit Metadata