paw-cra-video-longform
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches stock footage from Pexels, synthesized audio from ElevenLabs, and generated video clips from Fal.ai. These are well-known services integrated into the production workflow to support asset acquisition.
- [COMMAND_EXECUTION]: The workflow orchestrates local commands including
ffmpegfor assembly andegaki CLIfor AI video generation. Thevalidate-video.pyscript usessubprocess.runto callffprobefor metadata verification andffmpegfor loudness measurement. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied briefs and script data to generate prompts for AI models, creating a vulnerability surface for indirect injection.
- Ingestion points:
SKILL.mdStage 1 (Brief Intake) and Stage 2 (Script Development). - Boundary markers: No specific delimiters or safety instructions are defined for the interpolated script content in the prompt templates.
- Capability inventory: The skill has access to the filesystem via
ffmpegand the network viacurland specialized API clients. - Sanitization: Input text is not sanitized before being interpolated into AI generation prompts.
Audit Metadata