studio-mediagen
Warn
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill employs dynamic module loading via
import()with computed paths inscripts/lib/resolve.mjsandscripts/lib/clips.mjs. This mechanism is used to resolve dependencies from sibling directories within the ponti-studios toolset, relying on environment-variable-derived paths.\n- [COMMAND_EXECUTION]: The scripts invoke external binaries, specificallyffmpegandffprobe, throughspawnSyncto perform media processing tasks such as concatenation, duration analysis, and animatic generation.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes editorial data fromscenes.json(ingestion point). Thepromptandvoiceoverfields are interpolated into requests sent to external AI models (OpenRouter) without sanitization or protective boundary markers. The execution environment allows for file writing and network access, providing a surface for exploiting this injection.\n- [DATA_EXFILTRATION]: The skill performs network operations to the OpenRouter API for media generation and job polling. It also utilizes vendor utilities to publish keyframes to an external R2 storage service for provider access.
Audit Metadata