chapterize-video
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for users to configure the Clueso MCP server. For Claude Code users, it suggests the command
claude mcp add --transport http Clueso https://connect.clueso.io/mcp. This is a standard integration procedure for the vendor's tool. - [EXTERNAL_DOWNLOADS]: The skill references several external URLs for setup and documentation:
connect.clueso.ioandhelp.clueso.io. These resources belong to the skill's author, Clueso. It also references official plugin URLs onchatgpt.com(OpenAI), which is a well-known service. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data (video transcripts) to identify chapter boundaries, which presents a potential surface for indirect prompt injection.
- Ingestion points: Video transcripts are read and analyzed to detect topic shifts (SKILL.md).
- Boundary markers: None explicitly defined in the workflow to separate transcript content from instructions.
- Capability inventory: The skill possesses capabilities to split video, insert title cards, and export projects through the Clueso MCP.
- Sanitization: No explicit sanitization or filtering of the transcript content is described.
Audit Metadata