aliyun-vidu-video
Pass
Audited by Gen Agent Trust Hub on Oct 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes a Python script
scripts/generate_vidu_video.pyto facilitate API interaction, which includes network requests and local file operations. - [INDIRECT_PROMPT_INJECTION]: The skill ingests user-supplied content, creating a vulnerability surface for indirect injection.
- Ingestion points: User-provided
promptstrings andmediaURLs are processed via CLI arguments and documented inSKILL.md. - Boundary markers: The instructions lack explicit delimitation or instructions to ignore potential commands within user data.
- Capability inventory: The skill employs the
requestslibrary for network communication and has local file-write capabilities for outputting task data. - Sanitization: While the script validates configuration parameters like model names and media counts, it does not sanitize the content of the text prompt.
Audit Metadata