tile-tunnel
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides a command to execute a local script using Node.js (
node ~/.claude/skills/video-effects/run.cjs) to process video files. - [EXTERNAL_DOWNLOADS]: The skill depends on an external component named
video-effectsthat must be installed by the user to provide the necessary rendering engine (ffmpeg, Puppeteer, torch, etc.). - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-provided MP4 files as input for the processing script, representing an entry point for external data into the tool workflow.
Audit Metadata