ai-marketing-videos
Pass
Audited by Gen Agent Trust Hub on May 19, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
beltCLI tool via the Bash tool to perform video generation, audio synthesis, and media merging operations.- [EXTERNAL_DOWNLOADS]: Recommends installing the vendor-specific CLI toolbelt-sh/clivianpxand references an external installation guide hosted on the vendor's GitHub repository.- [PROMPT_INJECTION]: Identifies an attack surface for indirect prompt injection within the described automated video production workflows. - Ingestion points: Data is ingested from an LLM-generated script (
claude-sonnet-45) and used to dynamically generate scene prompts inSKILL.md. - Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the prompt templates.
- Capability inventory: The skill utilizes the
belttool for network-based generation and theBashtool for local file management and automation. - Sanitization: There is no evidence of sanitization or validation for content generated in one step before it is interpolated into prompts for subsequent video generation steps.
Audit Metadata