appshot-web-videos
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands to manage the Remotion project lifecycle. This includes
npm installfor dependencies,npm run devto launch a background preview server onlocalhost:3000, andnpx remotion renderto produce the final video file. It also useskillandlsofcommands to ensure the preview server is properly terminated after use. - [DYNAMIC_EXECUTION]: The skill dynamically generates
.tsxsource files for video scenes and an orchestrator component. These files are then executed by the Remotion engine to render the video. The generation is guided by a local reference file (code-guide-web.md) to ensure consistency and safety. - [INDIRECT_PROMPT_INJECTION]: The skill ingests data from the target project's source code to generate video content. This ingestion surface is a potential vector for indirect prompt injection if the source code contains adversarial instructions.
- Ingestion points: Target web project source code and
.appshot-context.json(referenced in Phase 1). - Boundary markers: The process is gated by
AskUserQuestioncalls that require user confirmation before moving from extraction to planning, and from planning to code generation. - Capability inventory: The skill can write files to the local file system (
appshot-video/directory) and execute shell commands (npm,npx,kill). - Sanitization: The skill relies on structured phase gates and a comprehensive code generation guide to constrain the output, although it does not explicitly sanitize the input text from the source code.
Audit Metadata