kling-ai

Pass

Audited by Gen Agent Trust Hub on Sep 24, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill establishes a connection to a remote Model Context Protocol (MCP) endpoint at https://kling.ai/mcp/plugin. This connection is used to fetch live tool definitions and route generation requests to the vendor's cloud infrastructure.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes data from external sources (API responses for elements, motions, and tasks), which represents a vulnerability surface for indirect prompt injection.
  • Ingestion points: Data enters the agent context through the outputs of the element_list, motion_library_list, and query_tasks tools.
  • Boundary markers: The skill utilizes structured JSON-array strings for element bindings and specific prompt placeholders like <<<ELEMENT_ID>>> to differentiate data from instructions.
  • Capability inventory: The skill has access to generation tools, file upload mechanisms, and resource management operations including element_delete.
  • Sanitization: The instructions require the agent to validate resource objects against a defined MCP contract, inspect resource types using element_get, and resolve unambiguous IDs before executing commands.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 24, 2026, 01:49 PM