localize-video
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to offer a specific configuration command (
claude mcp add --transport http Clueso https://connect.clueso.io/mcp) to the user. This is intended for setting up the vendor's MCP connector and includes a requirement for user confirmation. - [EXTERNAL_DOWNLOADS]: The instructions reference the vendor's official MCP endpoint (
https://connect.clueso.io/mcp) and help documentation (https://help.clueso.io/mcp-setup) to facilitate tool integration. These are legitimate resources owned by the skill author. - [DATA_EXPOSURE]: The skill workflow involves processing video transcripts and glossaries. While this represents an indirect prompt injection surface, the skill implements specific logic (glossary enforcement, manual re-timing) that mitigates accidental obedience to embedded instructions.
Audit Metadata