pika-video
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No malicious injection patterns or safety bypass attempts were detected. The instructions focus on providing a technical knowledge base for video generation and iteration strategies.
- [DATA_EXFILTRATION]: No evidence of unauthorized data access or exfiltration. The skill does not reference sensitive system paths or credentials. Network references are limited to official documentation and legitimate third-party service providers.
- [OBFUSCATION]: No hidden content, encoded strings, homoglyphs, or steganographic patterns were found. All URLs and instructions are in plain, human-readable text.
- [EXTERNAL_DOWNLOADS]: The skill mentions official endpoints for Pika and fal.ai. These are well-known services relevant to the skill's primary function and do not pose a security risk as documented.
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent on how to process external user data such as images and audio files. It includes proactive safety guidelines requiring the agent to verify user consent and rights for uploaded media, mitigating potential abuse vectors for likeness animation or impersonation.
- [DYNAMIC_CONTEXT_INJECTION]: No shell execution patterns or dynamic context injection markers (such as backtick-enclosed commands) were detected in the skill instructions.
Audit Metadata