multilingual-captions
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructions provide a shell command for users to connect to the Clueso MCP server (https://connect.clueso.io/mcp). This is a legitimate setup step for the vendor's platform.
- [PROMPT_INJECTION]: The skill analyzes video audio to generate transcripts, creating a surface for indirect prompt injection if source videos contain malicious instructions.
- Ingestion points: Audio analysis for transcription (SKILL.md, Step 2).
- Boundary markers: No specific delimiters are used to isolate transcript content.
- Capability inventory: Project modification and export capabilities via Clueso MCP.
- Sanitization: No transcript sanitization is mentioned.
Audit Metadata