alterlab-cdm-vfx-pipeline
Pass
Audited by Gen Agent Trust Hub on Sep 30, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection as it is instructed to ingest and act upon data from untrusted external sources.
- Ingestion points: The agent reads local project files such as screenplays, storyboards, and director's notes (SKILL.md), and performs web searches for VFX documentation and tutorials.
- Boundary markers: There are no instructions for the agent to use delimiters or to ignore instructions that might be embedded within the project files or web content it processes.
- Capability inventory: The skill possesses the capability to read files, write new project files, and perform network-based web searches, which could be abused if an injection is successful.
- Sanitization: The instructions do not specify any validation or sanitization of the content retrieved from external files or the web before it is incorporated into the agent's context.
Audit Metadata