paw-cra-video-shortform
Pass
Audited by Gen Agent Trust Hub on Sep 15, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from user-provided video briefs during the 'Brief Intake' step in
references/pre-production.md. - Ingestion points: Data enters the context via user-provided briefs (topic, duration, platform, brand, style) in
references/pre-production.md. - Boundary markers: The skill lacks explicit boundary markers or instructions to the model to ignore embedded malicious instructions within the brief data.
- Capability inventory: The skill possesses capabilities to execute shell commands via
ffmpeg,ffprobe,egakiCLI, andcurlfor API interactions, as detailed inreferences/production.mdandreferences/validation-export.md. - Sanitization: There is no evidence of explicit sanitization or escaping of the user-provided 'visual_description' or 'text_overlay' before they are interpolated into CLI commands.
- [COMMAND_EXECUTION]: The skill orchestrates multiple CLI tools to produce video content. It utilizes
ffmpegfor concatenation, audio mixing, and subtitle burn-in,ffprobefor codec validation, andegakiCLI for interfacing with AI video generation models (references/production.md,references/validation-export.md). - [DYNAMIC_EXECUTION]: The skill generates temporary artifacts at runtime, including
.srtsubtitle files, shell commands for video processing, and avideo-manifest.jsonexport log (references/production.md,references/validation-export.md). These are generated from templates using inputs derived from the brief and brand guidelines.
Audit Metadata