Security audit
Security checks for vulnerabilities and agentic risk
This is a creative manga-video workflow, but it automatically chains mutable installed skills and includes instructions to change those skill files, so it needs review before installation.
Install only if you trust the companion manju-* skills and want an automatic end-to-end workflow. Review the child skill files before use, because this workflow tells the agent to load them as authoritative and to follow future edits to those files.
The trigger phrases are very broad and overlap with normal creative requests such as '开始创作' or '全流程', making accidental invocation likely. Because the skill then auto-executes a long multi-stage workflow without confirmation, users may be pushed into behavior they did not explicitly request, increasing the chance of unintended prompt chaining and unexpected access to subordinate skills.
The skill is designed to proceed through all stages automatically and explicitly forbids asking the user before continuing, but this behavior is not clearly disclosed as a warning in the user-facing description. That creates a consent and transparency issue: users may believe they are getting a partial assist, while the skill actually orchestrates multiple downstream phases and external-tool instructions in one pass.
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
| 阶段 | 角色 | 权威Skill文件 |
|------|------|-------------|
| 阶段一 + 阶段三 | 总控导演 | `.codebuddy/skills/manju-director/SKILL.md` |
| 阶段二 | 编剧分镜 | `.codebuddy/skills/manju-writer/SKILL.md` |
| 阶段四 | 美术总监 | `.codebuddy/skills/manju-artist/SKILL.md` |
| 阶段五 | 动态制作 | `.codebuddy/skills/manju-animator/SKILL.md` |
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
| 阶段 | 角色 | 权威Skill文件 |
|------|------|-------------|
| 阶段一 + 阶段三 | 总控导演 | `.codebuddy/skills/manju-director/SKILL.md` |
| 阶段二 | 编剧分镜 | `.codebuddy/skills/manju-writer/SKILL.md` |
| 阶段四 | 美术总监 | `.codebuddy/skills/manju-artist/SKILL.md` |
| 阶段五 | 动态制作 | `.codebuddy/skills/manju-animator/SKILL.md` |
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
| 阶段 | 角色 | 权威Skill文件 |
|------|------|-------------|
| 阶段一 + 阶段三 | 总控导演 | `.codebuddy/skills/manju-director/SKILL.md` |
| 阶段二 | 编剧分镜 | `.codebuddy/skills/manju-writer/SKILL.md` |
| 阶段四 | 美术总监 | `.codebuddy/skills/manju-artist/SKILL.md` |
| 阶段五 | 动态制作 | `.codebuddy/skills/manju-animator/SKILL.md` |
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
| 阶段 | 角色 | 权威Skill文件 |
|------|------|-------------|
| 阶段一 + 阶段三 | 总控导演 | `.codebuddy/skills/manju-director/SKILL.md` |
| 阶段二 | 编剧分镜 | `.codebuddy/skills/manju-writer/SKILL.md` |
| 阶段四 | 美术总监 | `.codebuddy/skills/manju-artist/SKILL.md` |
| 阶段五 | 动态制作 | `.codebuddy/skills/manju-animator/SKILL.md` |
| 阶段六 | 剪辑合成 | `.codebuddy/skills/manju-editor/SKILL.md` |
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
| 阶段 | 角色 | 权威Skill文件 |
|------|------|-------------|
| 阶段一 + 阶段三 | 总控导演 | `.codebuddy/skills/manju-director/SKILL.md` |
| 阶段二 | 编剧分镜 | `.codebuddy/skills/manju-writer/SKILL.md` |
| 阶段四 | 美术总监 | `.codebuddy/skills/manju-artist/SKILL.md` |
| 阶段五 | 动态制作 | `.codebuddy/skills/manju-animator/SKILL.md` |
| 阶段六 | 剪辑合成 | `.codebuddy/skills/manju-editor/SKILL.md` |
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
|------|------|-------------|
| 阶段一 + 阶段三 | 总控导演 | `.codebuddy/skills/manju-director/SKILL.md` |
| 阶段二 | 编剧分镜 | `.codebuddy/skills/manju-writer/SKILL.md` |
| 阶段四 | 美术总监 | `.codebuddy/skills/manju-artist/SKILL.md` |
| 阶段五 | 动态制作 | `.codebuddy/skills/manju-animator/SKILL.md` |
| 阶段六 | 剪辑合成 | `.codebuddy/skills/manju-editor/SKILL.md` |
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
|------|------|-------------|
| 阶段一 + 阶段三 | 总控导演 | `.codebuddy/skills/manju-director/SKILL.md` |
| 阶段二 | 编剧分镜 | `.codebuddy/skills/manju-writer/SKILL.md` |
| 阶段四 | 美术总监 | `.codebuddy/skills/manju-artist/SKILL.md` |
| 阶段五 | 动态制作 | `.codebuddy/skills/manju-animator/SKILL.md` |
| 阶段六 | 剪辑合成 | `.codebuddy/skills/manju-editor/SKILL.md` |
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
| 阶段一 + 阶段三 | 总控导演 | `.codebuddy/skills/manju-director/SKILL.md` |
| 阶段二 | 编剧分镜 | `.codebuddy/skills/manju-writer/SKILL.md` |
| 阶段四 | 美术总监 | `.codebuddy/skills/manju-artist/SKILL.md` |
| 阶段五 | 动态制作 | `.codebuddy/skills/manju-animator/SKILL.md` |
| 阶段六 | 剪辑合成 | `.codebuddy/skills/manju-editor/SKILL.md` |
**关键规则：**
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
| 阶段一 + 阶段三 | 总控导演 | `.codebuddy/skills/manju-director/SKILL.md` |
| 阶段二 | 编剧分镜 | `.codebuddy/skills/manju-writer/SKILL.md` |
| 阶段四 | 美术总监 | `.codebuddy/skills/manju-artist/SKILL.md` |
| 阶段五 | 动态制作 | `.codebuddy/skills/manju-animator/SKILL.md` |
| 阶段六 | 剪辑合成 | `.codebuddy/skills/manju-editor/SKILL.md` |
**关键规则：**
This line does more than enumerate a path: it instructs the agent that it 'must first read' external skill files before each stage, creating an implicit prompt-loading chain from multiple additional sources. In a skill ecosystem, mandatory loading of other prompt files expands the attack surface substantially, because a compromised or untrusted child skill can inject adversarial instructions into the active workflow.
| 阶段二 | 编剧分镜 | `.codebuddy/skills/manju-writer/SKILL.md` |
| 阶段四 | 美术总监 | `.codebuddy/skills/manju-artist/SKILL.md` |
| 阶段五 | 动态制作 | `.codebuddy/skills/manju-animator/SKILL.md` |
| 阶段六 | 剪辑合成 | `.codebuddy/skills/manju-editor/SKILL.md` |
**关键规则：**
- 执行每个阶段前，你必须**先读取对应的独立Skill文件**，以获取该角色的完整能力定义
Skill enumerates or reads other installed skills. Access to other skills' SKILL.md files or the skills directory reveals prompt instructions, capabilities, and secrets that should be invisible to peer skills.
### 阶段六：剪辑合成方案 ← ✂️ 调用 `manju-editor`（剪辑合成Agent）
**执行角色：** 后期剪辑师
**权威来源：** `.codebuddy/skills/manju-editor/SKILL.md`
**执行前必须加载：** `manju-editor` Skill 中的全部规则，包括但不限于：
- 剪辑规则（拼接顺序、转场设置、配音要求、字幕规范、BGM搭配、调色要求、导出参数）
This maintenance instruction tells the agent/operator to modify specific child skill files and states that future workflow runs will dynamically load the latest rules from them. That creates a clear dynamic trust boundary issue: if any subordinate skill file is altered maliciously or carelessly, the workflow will ingest those instructions automatically on subsequent executions, enabling prompt-supply-chain style compromise.
## 维护规则（重要！）
### 当你需要优化Agent能力时：
1. **只修改对应的独立Skill文件**（如 `.codebuddy/skills/manju-writer/SKILL.md`）
2. **不需要修改本workflow文件**——它会在执行时动态加载独立Skill
3. 下次运行workflow时，会自动应用独立Skill中的最新规则