meta-short-drama
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input from the
user_messageto generate shooting scripts and prompts for external media generation models. - Ingestion points: The initial user request is ingested in the
intake_extractstep and subsequently used in thescript_draftandscript_revisedsteps (via theuser_messageinput). - Boundary markers: The skill employs
xml_escapeandtruncatefilters when interpolating the user message into step tasks. - Capability inventory: The workflow has the capability to write files (
filesystem-write), execute system processes (process-controlfor FFmpeg/FFprobe), and trigger external API calls for media generation (external_paid_submit). - Sanitization: Input is sanitized using
xml_escape. Crucially, the skill implements two mandatory human-in-the-loop review gates (review_gateandrevision_confirm_gate) which require explicit user approval before any external media submission or billing occurs. - [COMMAND_EXECUTION]: The skill requires the presence of system binaries and executes them for video editing tasks.
- Evidence: The metadata requires
ffmpegandffprobe. Steps such asmerge,subtitled_final, anddelivery_audit(via composition skills likevideo-mergerandsubtitle-burner) utilize these binaries to process video assets locally. - [EXTERNAL_DOWNLOADS]: The skill interacts with external AI service providers to generate images and videos.
- Evidence: The skill calls external providers through
nano-banana-pro(Gemini models) andseedance-2-prompt(Seedance models) for image and video creation. These steps are marked asexternal_paid_submitand are gated by user consent.
Audit Metadata