create-empty-premiere-project
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
premiere-cli init-projectcommand using arguments derived from user input. - [INDIRECT_PROMPT_INJECTION]: The skill possesses an indirect prompt injection surface because it processes untrusted user input that is then used to construct shell commands. 1. Ingestion points: project_name, series_name, and base_dir in SKILL.md. 2. Boundary markers: Absent; there are no instructions to validate or sanitize these inputs. 3. Capability inventory: shell command execution via
premiere-cliin SKILL.md. 4. Sanitization: Absent; values are interpolated directly into shell templates.
Audit Metadata