demo-trimmed-for-one-buyer
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for users to connect an external Model Context Protocol (MCP) server from the vendor's domain (
https://connect.clueso.io/mcp). This is a legitimate requirement for the skill to perform video editing tasks through the Clueso API. - [COMMAND_EXECUTION]: The instructions include a setup command (
claude mcp add --transport http Clueso https://connect.clueso.io/mcp) that the user is encouraged to run to configure their assistant environment. This command is presented transparently to the user as a necessary installation step. - [SAFE]: The skill follows security best practices by including a 'Confirm the cut plan with the user' step before performing any destructive edits on duplicated projects, which acts as a human-in-the-loop safeguard against unintended behavior.
Audit Metadata