google-veo

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied prompts which are passed to the belt CLI for video generation.
  • Ingestion points: The prompt field in JSON payloads for belt app run commands in SKILL.md.
  • Boundary markers: Absent.
  • Capability inventory: Execution of belt CLI commands via the Bash tool.
  • Sanitization: No input sanitization or validation logic is defined in the skill instructions.
  • [EXTERNAL_DOWNLOADS]: The skill fetches configuration and adds skills from the inference-sh ecosystem and its associated GitHub repository.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 08:14 PM
Security Audit — agent-trust-hub — google-veo