add-callouts-and-arrows

Pass

Audited by Gen Agent Trust Hub on Jul 10, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: References the vendor's official MCP endpoint (https://connect.clueso.io/mcp) and documentation for tool configuration. These are legitimate resources from the skill author.
  • [COMMAND_EXECUTION]: Provides setup instructions for the Clueso MCP connector via command-line interface tools like claude mcp add. These actions require user interaction or confirmation for configuration.
  • [PROMPT_INJECTION]: Ingests narration transcripts and video frame data (SKILL.md) to identify annotation targets. No explicit boundary markers or sanitization logic are defined for this external content. Capabilities are restricted to performing video edits via the Clueso MCP toolset.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 10, 2026, 09:42 AM
Security Audit — agent-trust-hub — add-callouts-and-arrows