aliyun-video-style-repaint
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The validation step in
SKILL.mdusespy_compileto verify script integrity. This is a standard build-time check and does not execute user-provided code at runtime. - [DATA_EXPOSURE]: The skill manages the
DASHSCOPE_API_KEYthrough environment variables or a local credentials file, which is the recommended secure practice for handling API secrets. - [EXTERNAL_DOWNLOADS]: The skill uses the official Alibaba Cloud DashScope API endpoint (
dashscope.aliyuncs.com). This is a well-known service and the interaction is limited to the functionality described. - [INDIRECT_PROMPT_INJECTION]: While the skill ingests a
video_urlprovided by the user, this data is passed directly to the DashScope API as a parameter. There is no evidence of unsafe interpolation into prompts that could influence agent behavior beyond the intended style transformation.
Audit Metadata