klingai-batch-processing
Pass
Audited by Gen Agent Trust Hub on Sep 9, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process multiple text prompts for video generation, including the capability to ingest data from external CSV files.
- Ingestion points: Data enters the skill context through the
promptsargument in submission functions withinSKILL.mdand through theload_batch_from_csvfunction inreferences/csv-batch-input.md. - Boundary markers: While the instructions in
SKILL.mdadvise users to validate content policy compliance, the code implementations lack technical boundary markers or explicit delimiters to prevent the agent from interpreting instructions embedded within the prompt data. - Capability inventory: The skill possesses network capabilities using
requestsandaiohttpto interact withapi.klingai.com, as seen inSKILL.mdandreferences/batch-processor-class.md. - Sanitization: The provided Python snippets do not include logic for sanitizing or escaping the interpolated prompt strings, potentially allowing malicious instructions in the input data to influence the generation process or downstream handling.
Audit Metadata