scenario-seedance-storyboard
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-supplied data such as shot scripts, character descriptions, and creative briefs. This content is then interpolated into prompts used by the
model_runtool to generate video assets. This workflow creates an attack surface where instructions embedded in the user data could potentially influence or override the agent's intended operation.\n - Ingestion points: Identified in
SKILL.md(Step 1: Script) andreferences/board-craft.md(Drawing the panels).\n - Capability inventory: The skill uses numerous tools including
model_run,search,upload_asset,asset_get, andcollection_createthroughout its operation.\n - Boundary markers: The skill employs structured prompt templates in
references/video-prompt.md(e.g., 'TIMELINE', 'REFERENCE ROLES'), which serve as organizational delimiters.\n - Sanitization: The skill lacks explicit sanitization or filtering mechanisms for the user-generated content before it is included in model prompts.\n- [COMMAND_EXECUTION]: In
SKILL.md, the agent is instructed to suggest the commandnpx skills add scenario-labs/skillsto the user if sibling skills are missing. This command facilitates the installation of external components from the vendor's repository.
Audit Metadata