Skills/npm/auto-promo-video

auto-promo-video@1.1.3

VERIFIED· install only

Publisher claims: "AI Agent Skill & Antigravity Plugin (Hybrid Playwright + Remotion 60FPS) untuk mengubah URL Landing Page menjadi video promosi kualitas studio 60 FPS lengkap dengan Voiceover Prosody & 124 BPM Groove BGM." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher hisyamabilkhoir · publishing for 9 daysInstalls 825Last detonated 2d ago
$claude mcp add auto-promo-video -- npx -y auto-promo-video
WatchReport an issue

Coverage

Nothing executable in the bundle ran; the trace covers the install step only.
Tested
every file read, file written and host contacted by what ran
Not tested
use of the skill by an agent

Is [email protected] safe to install?

KillerSkills ran it in the KillerSkills honeypot sandbox (1 scenario; nothing executable in the bundle ran; the trace covers the install step only) on 2026-11-12 and scored it 81/100 (Verified). In what ran, nothing we could detect went wrong: no undeclared network egress, no credential reads, no persistent instruction writes. What it does with a real credential was not observed; the static findings and the publisher carry the rest of the score. Summary: no network, touches nothing outside the project, writes no memory.

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations
t+CategoryObserved action
0.0sprocessno install scripts in bundle
0.0sprocessscript backend runs setup only
0.0sprocessscript backend runs setup only
0.0sprocessno install scripts to re-run

Static findings

HIGH
Destructive file system command detectedSKILL.md:40 · Destructive file system command detected* **2. Format / Rasio Video:**Fix: Build commands from fixed arguments; do not interpolate untrusted strings into a shell.
AST05
MEDIUM
File type combined with upload actionscripts/promo_engine.py:778 · File type combined with upload action — agent may exfiltrate local data filesparser.add_argument("--out", default="analysis.json", help="File output JSON hasil analisis")Fix: Remove the call, or declare the host in frontmatter and explain in the README what is sent and why.
AST07
LOW
Prompt injectionREADME.md:20 · Prompt injection — known jailbreak technique reference · informational: not an instruction file- **Layer 2 — Floating macOS Browser Frame:** Bingkai jendela browser macOS 3D dengan *traffic lights*, URL bar aktif, dan *sticky navbar* yang selalu terjaga rapi.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
CRITICAL
Prompt injectionSKILL.md:18 · Prompt injection — known jailbreak technique reference* **Dukungan Multi-Format (`16:9` & `9:16` Reels) dan Multi-Durasi (`30s`, `45s`, `60s`).**Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
MEDIUM
Python subprocess execution detectedscripts/promo_engine.py:326 · Python subprocess execution detectedres = subprocess.run(Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
CRITICAL
Prompt injectionSKILL.md:11 · Prompt injection — known jailbreak technique reference* **Render Frame-by-Frame 60 FPS Murni:** Bebas *frame drop* atau *lag* karena setiap frame dihitung secara matematis dengan `spring()` dan `interpolate()`.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionREADME.md:25 · Prompt injection — known jailbreak technique reference · informational: not an instruction file- Memecah naskah secara cerdas per klausa tanda baca (`!`, `?`, `—`) menjadi *Hook* (intonasi naik `+5Hz` s/d `+7Hz`, tempo sigap `+25%`), jeda nafas mikro `75ms`, dan *Punchline* tegas.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
MEDIUM
Python subprocess execution detectedscripts/promo_engine.py:59 · Python subprocess execution detectedsubprocess.run(["node", str(esbuild_script)], cwd=str(REMOTION_DIR))Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
CRITICAL
Prompt injectionSKILL.md:15 · Prompt injection — known jailbreak technique reference* **Layer 3:** Kamera `spring()` dengan *Ken Burns Push-in Drift*, *Spotlight Ring* tajam (tanpa memburamkan teks), dan kursor kurva Bezier + aksi klik slider live.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionREADME.md:22 · Prompt injection — known jailbreak technique reference · informational: not an instruction file- **Layer 4 — Bezier Cursor & Live Slider Interaction:** Kursor bergerak melengkung secara alami (kurva Bezier), menampilkan *click ripple*, dan menggeser *carousel/slider* halaman secara nyata.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
MEDIUM
Python subprocess execution detectedscripts/promo_engine.py:765 · Python subprocess execution detectedres = subprocess.run(render_cmd, cwd=str(REMOTION_DIR))Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
CRITICAL
Prompt injectionSKILL.md:3 · Prompt injection — known jailbreak technique reference…nggris), voiceover neural (Pria/Wanita/Tanpa Suara), kinetic karaoke subtitles, dan musik latar ambient. --- # Auto Landing Page Promo Video Skill (Hybrid Playwri…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionREADME.md:17 · Prompt injection — known jailbreak technique reference · informational: not an instruction file…h (*blur*). Playwright mengekstrak aset visual *lossless* beserta koordinat DOM dan status klik *slider/carousel*, lalu **Remotion React** me-render setiap *frame*…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
MEDIUM
Python subprocess execution detectedscripts/promo_engine.py:301 · Python subprocess execution detectedsubprocess.run([Fix: Build commands from fixed arguments, never from interpolated strings; prefer an API client over shelling out.
AST05
CRITICAL
Prompt injectionSKILL.md:8 · Prompt injection — known jailbreak technique reference…ngambil tangkapan visual lossless & interaksi slider/CTA tanpa merusak CSS web) dan **Remotion React Engine** (untuk merender video *frame-by-frame* 60 FPS setara …Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionREADME.md:26 · Prompt injection — known jailbreak technique reference · informational: not an instruction file- Dilengkapi **Auto-Silence Trimmer** untuk membuang jeda kosong (*dead air*) bawaan file MP3 TTS dan **Broadcast Vocal Exciter** agar suara terdengar jernih dan berenergi.Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionexamples/storyboard.example.json:41 · Prompt injection — known jailbreak technique reference · informational: not an instruction file"voiceover": "Dari Kelas Riset hingga Robotika—geser dan pilih program impianmu!"Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionplugin.json:15 · Prompt injection — known jailbreak technique reference · informational: not an instruction file"Analisis fitur interaktif website ini dan buatkan video promosi format Reels 9:16",Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionplugin.json:5 · Prompt injection — known jailbreak technique reference · informational: not an instruction file…:16) dengan Hybrid Playwright + Remotion React, Multi-Clause Prosody Voiceover, dan 124 BPM Groove BGM.", "author": { "name": "Hisyam Abilkhoir (Abyns Studio…Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionexamples/storyboard.example.json:17 · Prompt injection — known jailbreak technique reference · informational: not an instruction file"voiceover": "Inilah SMAN 1 Nusantara! Rumah bagi generasi cerdas dan berdaya saing."Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01
LOW
Prompt injectionexamples/storyboard.example.json:65 · Prompt injection — known jailbreak technique reference · informational: not an instruction file"voiceover": "PPDB resmi dibuka! Klik daftar sekarang dan raih masa depanmu!"Fix: Keep SKILL.md to visible, descriptive text. Remove comments and encoded text that address the agent.
AST01

Cost to the agent

Instructions loaded
≈1,522 tok
1 file · 14 in bundle

Tokens estimated at four characters each. Skills load their instruction text when triggered; the figure is what that costs.

Known vulnerabilities

No advisories in OSV for auto-promo-video@1.1.3 as of 2d ago. This is the package itself, not its dependencies.