video-request-architect
Pass
Audited by Gen Agent Trust Hub on May 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses subprocesses to manage and generate media files.\n
- The script
download_videos_from_manifest_with_ytdlp.mjsinvokespython3 -m yt_dlpto download video content from provided manifests.\n - The workspace runtime in
postplus_workspace_runtime.mjsutilizesffmpegfor generating test video fixtures and uses the macOSopenutility to allow users to view project files.\n- [EXTERNAL_DOWNLOADS]: The skill contains functionality to download external media and interact with cloud APIs.\n - Video assets are downloaded from remote sources via
yt-dlpbased on user-supplied manifests.\n - The
network_runtime.mjsandpostplus_cloud_client.mjslibraries facilitate communication with PostPlus Cloud APIs for authentication and media processing.\n- [PROMPT_INJECTION]: The skill processes structured data that could serve as an indirect prompt injection vector.\n - Ingestion points: The skill reads user-provided JSON files such as
brief.jsonandmanifest.jsoninbuild_video_request_architecture.mjsanddownload_videos_from_manifest_with_ytdlp.mjs.\n - Boundary markers: Instructions in
SKILL.mdadvise making requests self-contained and avoiding references to prior segments.\n - Capability inventory: The skill has access to the local file system, network requests, and subprocess execution (
ffmpeg,python3,open).\n - Sanitization: File operations are restricted to the project workspace through path resolution logic in
postplus_workspace_runtime.mjs.
Audit Metadata