video-text-storyboard
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user input via the AskUserQuestion tool to define video themes, characters, and scenes which are then formatted into storyboards. This constitutes an ingestion surface for potentially untrusted data, though it is the core intended functionality.
- Ingestion points: User inputs for video type, theme, material source, and scene descriptions in SKILL.md.
- Boundary markers: No specific delimiters or "ignore instructions" warnings are used in the prompt templates to separate user data from instructions.
- Capability inventory: The skill writes the generated storyboard to a local markdown file at /videos//storyboard/text_storyboard.md.
- Sanitization: The instructions do not specify any validation or sanitization of the user-provided content.
- [EXTERNAL_DOWNLOADS]: The skill documentation mentions an external utility named videoclaw and provides a manual installation command (uvx videoclaw --help) for the user. The skill code itself does not perform any automated downloads or executions of this tool.
Audit Metadata