localize-video
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides instructions for the user to manually execute a command to add an MCP connector:
claude mcp add --transport http Clueso https://connect.clueso.io/mcp. This is a documented setup process for integrating the vendor's tools. - [EXTERNAL_DOWNLOADS]: The skill references external domains (
clueso.io) for documentation and API connection. These resources belong to the skill's author and are necessary for the stated functionality. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-uploaded video recordings and existing project data, which are external inputs. 1. Ingestion points: Raw screen recordings and Clueso project transcripts (SKILL.md). 2. Boundary markers: No specific delimiters are defined for the narration text or UI labels during processing. 3. Capability inventory: Project duplication, automated translation, voice synthesis, and video rendering via the Clueso toolset. 4. Sanitization: The workflow mandates a human-in-the-loop review step, requiring a 'nod' from the user or a native speaker before final export.
Audit Metadata