agent-video-producer
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill incorporates user-supplied data into its instructional context using the
$ARGUMENTSvariable without employing boundary markers or sanitization. - Ingestion Point: The
$ARGUMENTSplaceholder inSKILL.mdprocesses external input. - Boundary Markers: No delimiters (e.g., XML tags, triple backticks) or "ignore instructions within data" warnings are present to isolate the user input from system instructions.
- Capability Inventory: The skill does not define dangerous capabilities such as file system writing, network requests, or subprocess execution, which significantly limits the potential impact of an injection attack.
- Sanitization: No explicit filtering or validation of the input data is performed before interpolation.
Audit Metadata