forum-answer-to-video
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides documentation for users to manually add the Clueso MCP connector using command-line tools (e.g., 'claude mcp add --transport http Clueso https://connect.clueso.io/mcp'). This is a standard integration procedure for the vendor's ecosystem.
- [EXTERNAL_DOWNLOADS]: The skill references vendor-owned URLs for tool connectivity and help resources ('connect.clueso.io', 'help.clueso.io'). These are trusted destinations within the context of the skill's authorship.
- [PROMPT_INJECTION]: The skill ingests untrusted text data from forum questions and answers (ingestion points in SKILL.md) to generate video scripts. This creates an indirect prompt injection surface. The capability inventory includes use of the 'clueso-mcp' tool. The instructions do not specify boundary markers or input sanitization methods, but the workflow involves user review steps before final output generation.
Audit Metadata