video
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill recommends installing the
hyperframespackage and usingnpx create-video@latest. These tools are associated with well-known services in the video automation space (HeyGen and Remotion). - [COMMAND_EXECUTION]: Provides standard shell commands for package installation and project initialization, which are necessary for the programmatic video workflows described.
- [PROMPT_INJECTION]: The skill defines workflows that involve processing untrusted external data using tools like
watch-videoandsocial-fetchto analyze video references or social media posts. This creates a surface for indirect prompt injection, as malicious instructions could be embedded in the external content (e.g., in transcripts or post descriptions). The instructions do not specify boundary markers or sanitization steps for this ingested data.
Audit Metadata