layer-video-timeline

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill mentions an instruction to install additional skills using npx skills add layerai/skills. This reference points to the vendor's own ecosystem and is a standard part of the platform's workflow for discovering and adding capabilities.
  • [COMMAND_EXECUTION]: The skill describes the use of specific tools: render_video_timeline, estimate_video_timeline_price, and get_generation_run. These are identified as first-party tools provided by the vendor ('layerai') for video composition tasks like sequencing, transitions, and overlays.
  • [DATA_EXPOSURE]: The skill uses file_id references for assets (video, image, audio) already present in the workspace. This is a secure method of referencing assets within the vendor's environment without exposing raw file paths or credentials.
  • [INDIRECT_PROMPT_INJECTION]: The skill handles user-provided text for overlays and captions. While this represents a data ingestion surface, the skill is focused on rendering these elements into a video file rather than re-interpreting them as instructions, and it includes a check step ('Watch the result end to end') for human/agent verification.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 09:27 AM
Security Audit — agent-trust-hub — layer-video-timeline