google-veo
Pass
Audited by Gen Agent Trust Hub on May 13, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate instructions for video generation and does not contain any malicious patterns, obfuscation, or unauthorized data access attempts. All external resources belong to the verified vendor infrastructure.
- [COMMAND_EXECUTION]: The skill utilizes the
beltCLI tool for interacting with video models. The execution environment is restricted to this specific tool via theallowed-toolsfrontmatter configuration, which is a security best practice to limit the agent's attack surface. - [EXTERNAL_DOWNLOADS]: The skill references documentation, images, and installation scripts hosted on official vendor domains (inference.sh) and the official
inference-shGitHub repository. These are documented neutrally as functional requirements. - [REMOTE_CODE_EXECUTION]: The skill suggests using
npxto add related skills from the vendor's repository. This represents a standard workflow for extending agent capabilities with verified packages from the vendor's own collection.
Audit Metadata