motion-craft
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The skill provides instructions for the agent to use
sudowith Linux package managers (apt-get,dnf, andpacman) to install the FFmpeg dependency. - [COMMAND_EXECUTION]: The skill makes extensive use of CLI tools including
ffmpeg,ffprobe, andedge-tts. It also automates platform-specific package managers such aswinget,choco,brew,apt-get,dnf,pacman,pip, andpipxfor environment setup. - [DYNAMIC_EXECUTION]: To handle complex filter chains, the skill generates temporary filter scripts at runtime and instructs FFmpeg to execute them.
- [EXTERNAL_DOWNLOADS]: The skill fetches software packages from official registries and system repositories. It also interacts with Microsoft's online Edge TTS service to generate narration audio and supports downloading music files from user-provided URLs.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted media files and narration text which can serve as vectors for indirect injection.
- Ingestion points: Video and audio files (via
ffprobe/ffmpeg) and narration text (viaedge-tts). - Boundary markers: None identified in the prompt instructions.
- Capability inventory: File system read/write, shell command execution, and network access (via TTS services and package managers).
- Sanitization: Instructions suggest escaping font paths, but do not provide a comprehensive sanitization strategy for all CLI arguments derived from untrusted inputs.
Audit Metadata