higgsfield-video-explainer
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFEREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: The skill includes a bootstrap instruction to install the Higgsfield CLI by downloading and executing a shell script from the author's official GitHub repository.
- [EXTERNAL_DOWNLOADS]: The skill fetches installation scripts and references resources from the higgsfield-ai GitHub organization.
- [COMMAND_EXECUTION]: The skill uses the Bash tool to run CLI commands for authenticating and managing video, audio, and image generation jobs.
- [PROMPT_INJECTION]: The skill processes user-supplied local documents to generate video scripts (ingestion point). No boundary markers or sanitization were identified for this content, which is handled using the Bash tool capability to perform CLI operations.
Audit Metadata