Curiosity 3D Explainer
Pass
Audited by Gen Agent Trust Hub on Nov 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill's design involves processing external, potentially untrusted data which can be exploited for indirect prompt injection.
- Ingestion points: Untrusted data enters the agent context through user-provided 'topics or questions' and 'reliable sources' used to generate the script and research brief in Phase 1.
- Boundary markers: The instructions lack explicit boundary markers (e.g., delimiters or 'ignore' instructions) to isolate user-provided content from the agent's internal logic.
- Capability inventory: The skill has access to extensive media generation tools (
media.generate_image,media.generate_video,media.generate_speech,media.generate_music), file management (media.upload_file), and theworkspace-writepermission, allowing it to create and modify files in the environment. - Sanitization: There is no mention of sanitization, validation, or filtering of the input data before it is used to drive the generation of scripts, keyframes, or final video assets.
Audit Metadata