wan-video
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructions define an interface that ingests external data, creating a potential surface for indirect prompt injection attacks.
- Ingestion points: Data enters the agent context through the
prompt,image_url,reference_video_urls,audio_url, andmediaparameters described inSKILL.md. - Boundary markers: The skill does not define specific delimiters or instructions for the model to ignore potential commands embedded within the media or prompt text.
- Capability inventory: The skill enables the agent to perform network requests to external API endpoints using
curland JSON payloads. - Sanitization: There are no explicit sanitization, validation, or filtering mechanisms described for the external content before it is processed.
- [EXTERNAL_DOWNLOADS]: The skill refers to the
mcp-wanpackage and makes network requests toapi.acedata.cloud. These resources are provided by the skill author, acedatacloud, and represent official vendor infrastructure for the service.
Audit Metadata