illustrated-story-reel
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions direct the agent to invoke
ffmpegandffprobeas subprocesses for scaling images, generating Ken Burns effects, and muxing audio with video. The commands include the-yflag, which forces the overwriting of output files without user confirmation. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-supplied story beats, narration text, and visual descriptions, creating an attack surface for indirect prompt injection.
- Ingestion points: External data enters the workflow via user-defined titles, emotional arcs, and beat-specific prompts (e.g.,
edit_prompt,narration,video_prompt) which are stored inplan.jsonand media filenames. - Boundary markers: The workflow incorporates human-in-the-loop checkpoints, requiring explicit phrases like 'approve plan', 'approve stills', 'approve audio', and 'approve clips' before proceeding to high-cost or final assembly phases.
- Capability inventory: The agent has the ability to write to the local filesystem, perform network requests to Pruna and Replicate APIs, and execute shell commands via media processing tools.
- Sanitization: There is no evidence of automated sanitization or escaping for user-provided strings before they are interpolated into prompt templates or command-line arguments, relying entirely on user review during the approval gates.
- [EXTERNAL_DOWNLOADS]: The skill identifies several prerequisite skills from the
PrunaAIorganization that must be installed vianpxto provide core image and video generation capabilities. These represent vendor-owned dependencies necessary for the skill's primary function.
Audit Metadata