Security audit

MiniMax H3 Video Editing Prompt

Security checks for vulnerabilities and agentic risk

Overview

This is a prompt-writing skill for MiniMax H3 video edits, with no hidden execution, persistence, credential use, or network behavior in the artifact.

Install only if you want Codex to inspect your provided video, image, or audio assets and draft H3 Ref2VA prompts. Expect the generated prompt to be in English by default, while quoted dialogue or visible text should remain in its original language.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Natural-Language Policy Violations

Medium

Confidence: 93% confidence
Finding: The instruction 'Return only one English `text` block' imposes a specific language choice as the default behavior. This is a natural-language policy concern because it does not offer the user a language choice or require opt-in before enforcing English output.

Natural-Language Policy Violations

Medium

Confidence: 93% confidence
Finding: The file is written entirely in Chinese and contains prescriptive instructions for how to use the editing recipe, but it does not indicate that language selection is optional or that the skill is intentionally limited to Chinese-speaking users. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation.

Natural-Language Policy Violations

Medium

Confidence: 95% confidence
Finding: The document is written entirely in Chinese and includes prescriptive instructions for skill use, but nowhere indicates that Chinese is optional or that the skill is limited to a Chinese-speaking or region-specific context. Under the policy, forcing a specific language without user opt-in is a natural-language locale violation.

Static analysis

No suspicious patterns detected.