nuke-compositing
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill defines functions that interpolate user-provided data into Python scripts for Nuke, creating a potential surface for indirect instructions. 1. Ingestion points: The parameters
plate_path,output_path, andkeyer_typeinSKILL.md. 2. Boundary markers: Absent. 3. Capability inventory: The skill usesnuke.createNodeandnode['file'].setValueinSKILL.mdand has theBashtool enabled. 4. Sanitization: Absent; input values are not validated before being used in scripts. - [DYNAMIC_EXECUTION]: The function
setup_keying_computilizesnuke.createNode(keyer_type), allowing for dynamic instantiation of node types based on variable input, which is a common but dynamic execution pattern in this context.
Audit Metadata