apply-brand-colors
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to connect to a vendor-owned MCP endpoint at
https://connect.clueso.io/mcp. This is a necessary configuration step for the skill to interact with the Clueso video editing service. - [COMMAND_EXECUTION]: Provides instructions for the agent to suggest a CLI command (
claude mcp add --transport http Clueso https://connect.clueso.io/mcp) to the user. This command is the standard mechanism for adding tool capabilities to the environment. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external data sources which could theoretically contain instructions.
- Ingestion points: The skill ingests user-provided video projects (via links or names), uploaded recordings, and brand configurations (colors and fonts) as described in
SKILL.md. - Boundary markers: None present in the instructions.
- Capability inventory: The skill has the capability to modify project elements including text, backgrounds, and overlays through the Clueso integration.
- Sanitization: There are no explicit sanitization steps defined for the brand metadata or project content within the instruction set.
Audit Metadata