fal-ai-media-provider
Pass
Audited by Gen Agent Trust Hub on Oct 6, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
renkuCLI tool for various media generation lifecycle tasks, includingmodels list,models show,schema show, andexecute. These commands are integral to the skill's function and align with the author's toolset. - [EXTERNAL_DOWNLOADS]: Technical documentation and API schemas are referenced from
fal.ai. These links provide necessary context for valid request authoring and do not involve executable code downloads. - [INDIRECT_PROMPT_INJECTION]: The skill processes external model guides and API schemas to determine request parameters. It mitigates injection risks by enforcing a specific JSON envelope structure for file markers and requiring manual confirmation steps within the Media Producer framework.
- [SAFE]: The instructions incorporate multiple security best practices, including explicit prohibitions on hardcoding credentials, direct API access, and unauthorized output persistence.
Audit Metadata