trim-dead-air
Pass
Audited by Gen Agent Trust Hub on Sep 26, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs users to Clueso's official domains (
connect.clueso.ioandhelp.clueso.io) to facilitate the connection of the required editing tools. - [COMMAND_EXECUTION]: Provides legitimate setup instructions for integrating the Clueso service with various AI assistants, including
claude mcp addfor Claude Code and plugin installation commands for Codex and ChatGPT. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill ingests untrusted data in the form of raw screen recordings or existing video projects (
SKILL.md). - Boundary markers: No explicit delimiters are used to separate video data from instructions.
- Capability inventory: The skill utilizes video editing capabilities (splitting, removing segments, and exporting) through the
clueso-mcpextension. - Sanitization: Processing logic is focused on signal-level analysis (detecting audio silence and static frames) rather than semantic parsing of video content, minimizing the risk of instruction injection.
Audit Metadata