fal-ai-media

Pass

Audited by Gen Agent Trust Hub on Apr 14, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the download of the fal-ai-mcp-server package from the npm registry as part of its setup process.
  • [COMMAND_EXECUTION]: Provides configuration to run the npx command for initializing the media generation server.
  • [DATA_EXFILTRATION]: Contains instructions and code for sending data to ElevenLabs' and fal.ai's official API endpoints for media synthesis.
  • [PROMPT_INJECTION]: The skill ingests user-provided text in the prompt field for media generation.
  • Ingestion points: User-provided strings in generate() calls and Python scripts.
  • Boundary markers: None present.
  • Capability inventory: Subprocess execution (via MCP npx command) and network requests (Python requests).
  • Sanitization: Not explicitly defined in the skill content.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 14, 2026, 12:19 AM
Security Audit — agent-trust-hub — fal-ai-media