scenario-video-ads
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill documentation includes instructions for managing modular dependencies via the
npx skills addcommand. This allows the agent to install necessary 'sibling skills' from thescenario-labs/skillsrepository to handle specific parts of the production pipeline, such as audio generation or video assembly. As these resources are hosted in the official repository of the skill's author, this represents legitimate cross-skill coordination and dependency management. - Evidence:
references/dependencies.mdexplicitly lists commands likenpx skills add scenario-labs/skills --skill <name>to resolve gaps in the available toolset. - [INDIRECT_PROMPT_INJECTION]: The skill possesses a surface for indirect prompt injection as it is designed to process external assets such as product photos, logos, and creative briefs provided by the user or external sources.
- Ingestion points:
references/brief.mddefines product shots, character references, and font files as external inputs required to start a campaign. - Capability inventory: The agent uses tools for image-to-video generation, audio synthesis, and final video assembly.
- Sanitization: The skill mitigates risks associated with untrusted data by implementing a 'Fidelity Gate' (Step 6), which uses the
asset_analyzetool to perform automated visual validation of every generated clip against the original, approved brand reference before it is allowed into the final edit. - [COMMAND_EXECUTION]: The instructions direct the agent to utilize specialized technical tools via search-based discovery for post-production tasks.
- Evidence:
references/delivery.mdandreferences/storyboard.mdmention performing search queries forvideo upscaleandvideo reversetools to conform assets to delivery standards.
Audit Metadata