kinetic-text-video
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions to install a Model Context Protocol (MCP) connector using the command
claude mcp add --transport http Clueso https://connect.clueso.io/mcp. This is a standard setup procedure for the skill's required infrastructure and is intended to be executed with user oversight. - [EXTERNAL_DOWNLOADS]: The instructions reference and connect to the author's official domains (
connect.clueso.ioandhelp.clueso.io) to facilitate tool setup and provide documentation. These represent legitimate vendor resources. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user-supplied text to generate video content, creating a potential surface for instructions embedded within the input data.
- Ingestion points: User-provided copy, quotes, or announcements defined in the 'Inputs' section of
SKILL.md. - Boundary markers: None explicitly used to delimit processed user content.
- Capability inventory: The skill utilizes Clueso MCP tools to create projects, generate voiceovers, and export video files.
- Sanitization: The skill does not define automated sanitization, but the workflow includes mandatory manual review steps for both the text beats and the final video link before export.
Audit Metadata