manim-composer
Pass
Audited by Gen Agent Trust Hub on Sep 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from both user-provided concepts and web search results to generate video plans.
- Ingestion points: User input for video ideas and responses to clarifying questions; Web search tool output during the research phase (SKILL.md).
- Boundary markers: The instructions do not specify the use of delimiters or 'ignore' instructions when processing external content.
- Capability inventory: The skill is primarily designed to write content to a file (
scenes.md). It does not explicitly request permissions for command execution or arbitrary network operations beyond standard search tools. - Sanitization: There are no explicit instructions for sanitizing or escaping the data retrieved from external sources before it is interpolated into the generated output.
Audit Metadata