export-art
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill fetches the CCapture.js library from the JSDelivr CDN (
cdn.jsdelivr.net) to facilitate frame-by-frame video recording in a browser environment. - [COMMAND_EXECUTION]: Includes
ffmpegcommand-line examples for converting image sequences and videos into MP4 and high-quality GIF formats. - [INDIRECT_PROMPT_INJECTION]: The skill contains logic for processing generative art parameters such as seeds and canvas targets.
- Ingestion points: Render parameters (seed, scale) and canvas DOM elements as described in
SKILL.mdexamples. - Boundary markers: Instructions are encapsulated within fenced code blocks; no explicit safety delimiters for user-supplied data are present.
- Capability inventory: Utilizes the
save()function andCCapturelibrary to generate and save media files to the local environment or browser. - Sanitization: No specific sanitization or validation logic is applied to the numeric parameters or canvas input.
Audit Metadata