p-video
Pass
Audited by Gen Agent Trust Hub on Aug 31, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references documentation and installation scripts located in the official inference-sh GitHub repository. These are legitimate resources for the service's functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided text prompts for video generation which are passed as arguments to the belt CLI tool. While the prompt is wrapped in JSON, this represents a potential surface where adversarial user input could attempt to influence the agent's behavior. 1. Ingestion points: User prompts passed to the belt app run command in SKILL.md. 2. Boundary markers: Input is structured within a JSON object. 3. Capability inventory: Execution of the belt CLI via the Bash tool. 4. Sanitization: Relies on the host environment's execution logic to handle shell escaping.
Audit Metadata