veo
Pass
Audited by Gen Agent Trust Hub on Jul 3, 2026
Risk Level: SAFE
Full Analysis
- [DYNAMIC_EXECUTION]: The script contains a function
disable_ssl_verificationthat monkey-patches thehttpxlibrary at runtime to disable SSL certificate verification. While this facilitates use in environments with SSL-inspecting proxies or self-signed certificates, it exposes the connection to potential Man-in-the-Middle (MITM) attacks if activated by the user via the--no-ssl-verifyflag orVEO_NO_SSL_VERIFYenvironment variable. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided text prompts and passes them to the Gemini Veo model. This represents a standard attack surface for indirect prompt injection where a user might attempt to bypass the video model's safety filters. The script relies on Google's server-side safety filters and provides error handling for blocked content.
- [EXTERNAL_DOWNLOADS]: The script downloads generated video files (.mp4) from Google's official API endpoints. These downloads are from a well-known and trusted service.
Audit Metadata