anycap-gemini-omni-video-edit
Pass
Audited by Gen Agent Trust Hub on Oct 1, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided video and image files alongside natural language descriptions to perform edits, creating a potential surface for indirect prompt injection.
- Ingestion points: Local media paths or external URLs provided through
--param videosand--param imagesinSKILL.mdandreferences/scenarios.md. - Boundary markers: Uses natural language templates and bracketed placeholders for user input, but does not specify robust delimiters or instructions to ignore potential commands embedded in media content.
- Capability inventory: Orchestrates remote model calls via
anycap video generateand executes local analysis usingffmpegandffprobeas described inreferences/qa.md. - Sanitization: No specific content validation or sanitization for ingested media files is mentioned.
- [COMMAND_EXECUTION]: The skill uses local command-line utilities for video analysis and generation tasks.
- Evidence: Execution of
ffprobefor metadata verification andffmpegfor frame extraction inreferences/qa.md. - Evidence: Use of the vendor's
anycapCLI tool for model discovery and video editing operations throughout the skill documentation. - [EXTERNAL_DOWNLOADS]: The skill references external resources and allows for processing of remote content.
- Evidence: Links to official documentation on
ai.google.devand the vendor's site atanycap.ai. - Evidence: Support for remote URLs in the
anycap video generatecommand parameters.
Audit Metadata