meta-short-drama
Pass
Audited by Gen Agent Trust Hub on Aug 7, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [PROMPT_INJECTION]: The skill processes untrusted user input which is then interpolated into prompts for downstream agents and tools. Ingestion points: The skill takes direct user input from the initial message and the review gate. Boundary markers: The skill uses
xml_escapein several LLM prompts but lacks explicit delimiters to separate user data from instructions in others. Capability inventory: The agent has access tofilesystem-writevia thewrite_filetool andprocess-controlvia sub-skills that invoke shell-based media tools likeffmpeg. Sanitization: Input is processed usingslugify,truncate, andxml_escapebefore being used in file paths or prompts. - [COMMAND_EXECUTION]: The skill requires
process-controlcapabilities to orchestrate media assembly, stitching, and subtitle burning using system-level tools likeffmpegvia thevideo-mergerandsubtitle-burnerskills to generate the final MP4 deliverable. - [EXTERNAL_DOWNLOADS]: The skill utilizes external image and video generation models (such as Gemini and Seedance) to produce visual assets based on the user-approved script. These calls are mediated by authorized sub-skills and are only executed after user confirmation.
Audit Metadata