skills/creativeclawco/creative-claw-marketplace/creativeclaw-add-video-intro-outro/Gen Agent Trust Hub
creativeclaw-add-video-intro-outro
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied videos and potentially user-defined HTML for rendering, which constitutes a standard surface for indirect prompt injection.
- Ingestion points: The agent accepts
video_urlsand HTML configuration from users or external sources as specified in SKILL.md. - Boundary markers: No explicit delimiters or boundary markers are instructed for the agent to distinguish between media metadata and operational instructions.
- Capability inventory: The skill has access to media manipulation tools including
merge_media,scale_video,trim_video, and generation tools likerender_html_videoandgenerate_videovia its MCP dependency. - Sanitization: There are no specific instructions for the agent to sanitize or validate metadata from imported clips before processing.
- [EXTERNAL_DOWNLOADS]: The skill defines a dependency on a remote Model Context Protocol (MCP) server provided by the vendor.
- The agent configuration in
agents/openai.yamlspecifies a tool endpoint athttps://app.creativeclaw.co/mcp/chatgptto fetch and execute media processing capabilities. This represents the intended communication channel between the agent and the service provider.
Audit Metadata