google-veo
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches installation instructions and documentation from the official GitHub repository for inference.sh.
- [COMMAND_EXECUTION]: Executes the
beltcommand-line tool to perform video generation and account authentication. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-defined prompts for video generation, which could theoretically contain instructions intended to influence model behavior. 1. Ingestion points:
promptparameter in JSON inputs passed to thebeltCLI tool in SKILL.md. 2. Boundary markers: No delimiters are used to wrap user input within the prompts. 3. Capability inventory: The skill's environment is restricted to thebeltCLI as defined in theallowed-toolsfrontmatter. 4. Sanitization: There is no indication of input sanitization or filtering in the documentation.
Audit Metadata