fal-ai-media-provider

Pass

Audited by Gen Agent Trust Hub on Oct 6, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes the renku CLI tool for various media generation lifecycle tasks, including models list, models show, schema show, and execute. These commands are integral to the skill's function and align with the author's toolset.
  • [EXTERNAL_DOWNLOADS]: Technical documentation and API schemas are referenced from fal.ai. These links provide necessary context for valid request authoring and do not involve executable code downloads.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external model guides and API schemas to determine request parameters. It mitigates injection risks by enforcing a specific JSON envelope structure for file markers and requiring manual confirmation steps within the Media Producer framework.
  • [SAFE]: The instructions incorporate multiple security best practices, including explicit prohibitions on hardcoding credentials, direct API access, and unauthorized output persistence.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 6, 2026, 01:17 PM