codex-storyboard-video-production
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installation instructions involve cloning a repository from GitHub (https://github.com/Yuuhann1999/codex-storyboard.git) and adding a plugin from the Codex marketplace.
- [COMMAND_EXECUTION]: The skill requires the user to execute shell commands to install dependencies (git clone) and start the local workspace server (npm start).
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits an attack surface for indirect prompt injection as it processes user-provided design guidelines and visual descriptions to generate assets.
- Ingestion points: Data stored in DESIGN.md, shot script, and visualDescription fields are processed by the agent to drive asset generation tools.
- Boundary markers: No specific delimiters or safety instructions are provided to separate the design guidelines from the generation logic.
- Capability inventory: The skill possesses capabilities for local file system management (creating, updating, and deleting project files/media) and interacting with image/video generation services.
- Sanitization: There is no evidence of sanitization or validation of the content within the storyboard shots before it is passed to generation tools.
Audit Metadata