motion-graphics
Pass
Audited by Gen Agent Trust Hub on Nov 14, 2026
Risk Level: SAFEDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [DYNAMIC_EXECUTION]: The skill documentation references the use of an agentWorkspace action called
motion_compileto compile TSX motion components. This indicates that the skill environment supports runtime compilation of script-based graphics components. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and act upon external, potentially untrusted data from video transcripts and user-provided design specifications. 1. Ingestion points: Video transcripts are used by the
designInsertscommand to determine graphic placement. 2. Boundary markers: There are no explicit instructions or boundary markers to prevent the agent from obeying instructions that might be embedded within the transcript text. 3. Capability inventory: The skill has the capability to render arbitrary HTML/SVG elements and compile code components. 4. Sanitization: No sanitization or validation of the external transcript data is described in the workflow documentation.
Audit Metadata