appshot-web-videos

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes shell commands to manage the Remotion project lifecycle. This includes npm install for dependencies, npm run dev to launch a background preview server on localhost:3000, and npx remotion render to produce the final video file. It also uses kill and lsof commands to ensure the preview server is properly terminated after use.
  • [DYNAMIC_EXECUTION]: The skill dynamically generates .tsx source files for video scenes and an orchestrator component. These files are then executed by the Remotion engine to render the video. The generation is guided by a local reference file (code-guide-web.md) to ensure consistency and safety.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the target project's source code to generate video content. This ingestion surface is a potential vector for indirect prompt injection if the source code contains adversarial instructions.
  • Ingestion points: Target web project source code and .appshot-context.json (referenced in Phase 1).
  • Boundary markers: The process is gated by AskUserQuestion calls that require user confirmation before moving from extraction to planning, and from planning to code generation.
  • Capability inventory: The skill can write files to the local file system (appshot-video/ directory) and execute shell commands (npm, npx, kill).
  • Sanitization: The skill relies on structured phase gates and a comprehensive code generation guide to constrain the output, although it does not explicitly sanitize the input text from the source code.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 02:50 PM