vector-scene-layout
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
subprocess.Popeninscripts/render_stills.pyto executenpx remotion still. This is a core functionality for rendering animation frames. The script implements input validation using regex ([a-z0-9-]+) for target and beat identifiers to prevent command injection. - [EXTERNAL_DOWNLOADS]: The workflow requires the installation of specific, version-pinned NPM packages (e.g.,
@remotion/transitions@4.0.522) and usesnpx create-videofor project scaffolding. It also pulls additional functionality from theremotion-devorganization. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied data from
storyboard.jsonto generate content for video scenes. This text is rendered into images which the agent is then instructed to inspect visually, creating a potential surface for indirect prompt injection. The skill includes step-by-step review instructions for the agent to verify layout and legibility, which serves as a manual checkpoint. - Ingestion points: The
storyboard.jsonfile is read by Python scripts and imported into React templates to populate scene text. - Boundary markers: None present for the
beat.textfields used in scene templates. - Capability inventory: Includes file writing, package installation, and command execution for rendering.
- Sanitization: Identifiers are checked against a strict whitelist regex; text content is interpolated into standard React templates.
Audit Metadata