genmedia-ref
Pass
Audited by Gen Agent Trust Hub on Apr 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides detailed instructions and examples for executing the
genmediaCLI tool to perform model inference and management tasks. - [EXTERNAL_DOWNLOADS]: The
runandstatuscommands include a--downloadflag that automatically fetches files from remote media URLs to the local filesystem. - [DATA_EXFILTRATION]: The
uploadcommand enables sending local files to the fal.ai CDN, which is a standard feature for providing inputs to generative models but represents a data movement capability. - [PROMPT_INJECTION]: The skill demonstrates an attack surface for indirect prompt injection as it processes untrusted data from external model outputs.
- Ingestion points: Data enters the agent context through CLI command results (e.g.,
genmedia run,genmedia status) as documented inSKILL.md. - Boundary markers: No specific delimiters or safety instructions are provided to the agent to distinguish between tool output and potential embedded instructions.
- Capability inventory: The skill provides capabilities for local file reads and network uploads (
genmedia upload), file writes (--download), and arbitrary model execution (genmedia run). - Sanitization: There is no documented sanitization or validation of the structured JSON data returned by the CLI before it is processed by the agent.
Audit Metadata