cinematic-vfx-director
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides high-level art direction guidelines and structural templates for cinematic prompt engineering. It does not contain any scripts, binaries, or executable code.
- [EXTERNAL_DOWNLOADS]: The skill includes numerous links to research papers and documentation from well-known industry organizations, including Disney, Pixar, Riot Games, Sony, Epic Games, and SideFX. These are used strictly as informational references to support the skill's VFX logic and do not involve remote code execution.
- [PROMPT_INJECTION]: A static analysis hint highlighted a concealment pattern regarding keeping diagnostic language 'backstage'. Review of the context in 'Step 10: Compile the VFX Card' confirms this is a benign instruction intended to ensure the final output provided to the user is concise and professional, rather than showing the agent's internal brainstorming or rejected options.
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied shot descriptions to generate VFX cards and prompts. While this is a data ingestion surface, the skill lacks any dangerous tools, network capabilities, or file-system access that could be exploited via injection. It also uses structured output formats which helps maintain response integrity.
Audit Metadata