scenario-ugc
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the user to install missing functional dependencies from the author's own repository using the
npx skills add scenario-labs/skillscommand. This is a standard management procedure within the vendor's ecosystem. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text and media assets, which constitutes a potential attack surface for indirect instructions.
- Ingestion points: Untrusted data enters the context via user-supplied scripts and uploaded photos or videos used for generation (Steps 3, 4, and 6).
- Boundary markers: The skill recommends using quotes to delimit dialogue in prompts (Route table).
- Capability inventory: The skill uses
model_runto execute video/audio generation,upload_assetfor file handling, andcollection_add_assetsfor asset management. - Sanitization: The instructions mandate that the agent must confirm the final wording of the script with the user before generation and strictly forbids the creation of fabricated claims or testimonials.
Audit Metadata