software-training-video
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to connect to an external connector at
https://connect.clueso.io/mcp. This resource is hosted on the vendor's own domain and is required for the skill's primary functionality. - [COMMAND_EXECUTION]: The instructions include platform-specific setup commands, such as
claude mcp add --transport http Clueso https://connect.clueso.io/mcp, to enable the required tools in the agent's environment. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-provided source material, which constitutes an attack surface for indirect prompt injection.
- Ingestion points: Steps lists, SOP documents, and screen recordings provided by the user (SKILL.md).
- Boundary markers: None explicitly defined in the instructions.
- Capability inventory: Video project creation, scene editing, visual blurring, and export functionality provided via Clueso MCP tools.
- Sanitization: The skill includes instructions to identify and blur sensitive data, such as credentials or private information, that may be visible in the user-provided recordings.
Audit Metadata