video

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill recommends installing the hyperframes package and using npx create-video@latest. These tools are associated with well-known services in the video automation space (HeyGen and Remotion).
  • [COMMAND_EXECUTION]: Provides standard shell commands for package installation and project initialization, which are necessary for the programmatic video workflows described.
  • [PROMPT_INJECTION]: The skill defines workflows that involve processing untrusted external data using tools like watch-video and social-fetch to analyze video references or social media posts. This creates a surface for indirect prompt injection, as malicious instructions could be embedded in the external content (e.g., in transcripts or post descriptions). The instructions do not specify boundary markers or sanitization steps for this ingested data.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 08:49 AM