export-art

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches the CCapture.js library from the JSDelivr CDN (cdn.jsdelivr.net) to facilitate frame-by-frame video recording in a browser environment.
  • [COMMAND_EXECUTION]: Includes ffmpeg command-line examples for converting image sequences and videos into MP4 and high-quality GIF formats.
  • [INDIRECT_PROMPT_INJECTION]: The skill contains logic for processing generative art parameters such as seeds and canvas targets.
  • Ingestion points: Render parameters (seed, scale) and canvas DOM elements as described in SKILL.md examples.
  • Boundary markers: Instructions are encapsulated within fenced code blocks; no explicit safety delimiters for user-supplied data are present.
  • Capability inventory: Utilizes the save() function and CCapture library to generate and save media files to the local environment or browser.
  • Sanitization: No specific sanitization or validation logic is applied to the numeric parameters or canvas input.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 01:35 AM