tighten-narration

Pass

Audited by Gen Agent Trust Hub on Sep 26, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests video transcripts and raw recordings to perform script compression and narration regeneration, creating a surface for indirect prompt injection where instructions could be embedded in the transcript data.\n
  • Ingestion points: Processes existing Clueso projects or uploaded raw screen recordings (transcript reading and runtime estimation step in SKILL.md).\n
  • Boundary markers: No specific boundary markers or instructions to ignore embedded commands in the transcript are present.\n
  • Capability inventory: Capability to write to Clueso projects, regenerate audio narration, re-align visuals, and generate review links.\n
  • Sanitization: No evidence of sanitization or filtering of the transcript content before it is used to iterate on script versions.\n- [EXTERNAL_DOWNLOADS]: The skill provides instructions to connect the agent to an external Model Context Protocol (MCP) server for functionality.\n
  • Evidence: Instructs the connection to https://connect.clueso.io/mcp as a vendor-provided resource for video editing capabilities.\n- [COMMAND_EXECUTION]: The skill instructs the agent to provide specific shell commands to the user to configure the execution environment.\n
  • Evidence: Instructs suggesting the command claude mcp add --transport http Clueso https://connect.clueso.io/mcp to the user in Claude Code environments.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 26, 2026, 06:28 AM