forum-answer-to-video

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill directs the user to connect to an external Model Context Protocol (MCP) server at https://connect.clueso.io/mcp. This is a vendor-provided service required for the skill's primary video creation functionality.
  • [COMMAND_EXECUTION]: The instructions permit the agent to offer to run the claude mcp add command to automatically configure the tool connector for users of compatible CLI environments.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process untrusted data in the form of forum threads and community posts.
  • Ingestion points: The agent reads user-provided forum questions and answers to create scripts (documented in SKILL.md).
  • Boundary markers: The skill instructions do not utilize specific delimiters or instructions to ignore embedded commands within the input text.
  • Capability inventory: The skill utilizes tools to compose video scenes, generate narration, and export rendered video files.
  • Sanitization: There are no specified sanitization or filtering steps for the untrusted text before it is used to generate the video content.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 06:27 AM