ai-video-generation
Pass
Audited by Gen Agent Trust Hub on Nov 13, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to install the belt-sh/cli and references installation scripts from the official inference-sh GitHub repository. These are vendor-owned resources necessary for the skill's functionality.
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user data such as text prompts and media URLs for generation. Ingestion points: Prompt, image_url, audio_url, and video_url fields in SKILL.md. Boundary markers: Inputs are encapsulated within JSON structures passed to the CLI. Capability inventory: Employs the Bash tool to execute the belt CLI. Sanitization: No explicit sanitization or filtering of prompt content is described.
Audit Metadata