blog-to-explainer
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes the
import_from_urltool to fetch data and perform page captures from external URLs provided by the user as part of its core functionality. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted content from external websites, which creates a surface for indirect prompt injection attacks where malicious instructions hidden in a blog post could influence the agent's behavior.
- Ingestion points: The skill is instructed to fetch and read the entire content of a user-supplied URL using
import_from_urlin the 'Read the post, ask once' section of SKILL.md. - Boundary markers: The instructions lack explicit delimiters or warnings to ignore commands that may be embedded within the fetched external content.
- Capability inventory: The agent has access to a variety of video creation and manipulation tools including
create_clip,add_layout,addMedia,addTitle, andduplicate_motion_document. - Sanitization: There are no specific instructions for the agent to sanitize, filter, or validate the content extracted from external URLs before it is used for script generation or visual design.
Audit Metadata