add-key-point-overlays
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references setup guides and connector endpoints at the vendor's official domain (clueso.io). These are documented as part of the intended setup process.
- [COMMAND_EXECUTION]: The skill provides explicit instructions for the user to install the Clueso integration using commands like 'claude mcp add' and 'codex plugin add'. These are transparent configuration steps for the required tool.
- [INDIRECT_PROMPT_INJECTION]: The skill processes video narration transcripts to generate distilled text overlays, creating a potential surface for indirect prompt injection. However, the risk is mitigated as the operations are confined to visual editing within the Clueso workspace.
- Ingestion points: Video narration transcript (SKILL.md).
- Boundary markers: Absent.
- Capability inventory: Video editing and text overlay placement via Clueso tools.
- Sanitization: Absent.
Audit Metadata