motion-craft

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The skill provides instructions for the agent to use sudo with Linux package managers (apt-get, dnf, and pacman) to install the FFmpeg dependency.
  • [COMMAND_EXECUTION]: The skill makes extensive use of CLI tools including ffmpeg, ffprobe, and edge-tts. It also automates platform-specific package managers such as winget, choco, brew, apt-get, dnf, pacman, pip, and pipx for environment setup.
  • [DYNAMIC_EXECUTION]: To handle complex filter chains, the skill generates temporary filter scripts at runtime and instructs FFmpeg to execute them.
  • [EXTERNAL_DOWNLOADS]: The skill fetches software packages from official registries and system repositories. It also interacts with Microsoft's online Edge TTS service to generate narration audio and supports downloading music files from user-provided URLs.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted media files and narration text which can serve as vectors for indirect injection.
  • Ingestion points: Video and audio files (via ffprobe/ffmpeg) and narration text (via edge-tts).
  • Boundary markers: None identified in the prompt instructions.
  • Capability inventory: File system read/write, shell command execution, and network access (via TTS services and package managers).
  • Sanitization: Instructions suggest escaping font paths, but do not provide a comprehensive sanitization strategy for all CLI arguments derived from untrusted inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 09:16 AM