video-generation-gateways
Pass
Audited by Gen Agent Trust Hub on Jul 11, 2026
Risk Level: SAFEPROMPT_INJECTIONNO_CODE
Full Analysis
- [PROMPT_INJECTION]: The skill describes processes that ingest untrusted user data (prompts and parameters) which are then interpolated into API requests for video generation.
- Ingestion points: User-provided text prompts, resolution settings, and duration parameters defined in SKILL.md.
- Boundary markers: The skill does not define specific delimiters or instructions to ignore embedded commands within user prompts.
- Capability inventory: Instructions involve network operations to external gateway endpoints (e.g., queue.fal.run, api.replicate.com).
- Sanitization: No explicit sanitization or validation logic is described for the incoming user prompts.
- [NO_CODE]: The skill is comprised entirely of documentation and instructional markdown. It does not include executable scripts, configuration files that trigger automation, or binary files.
- [SAFE]: The skill references well-known technology services and official API documentation for fal.ai, Replicate, and WaveSpeed. All network operations described are consistent with the skill's stated purpose and target legitimate service domains.
Audit Metadata