magic-hour-character-replace
Pass
Audited by Gen Agent Trust Hub on Nov 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [SAFE]: The skill provides legitimate instructions for video character replacement using the Magic Hour API and MCP server. The logic follows standard media processing workflows.\n- [EXTERNAL_DOWNLOADS]: The skill references external documentation, setup guides, and examples hosted on GitHub and official magichour.ai domains. These are vendor-owned resources used for user guidance and are considered safe.\n- [INDIRECT_PROMPT_INJECTION]: The skill handles untrusted data in the form of user-provided video and image assets. However, it interacts with these through structured API calls and durable file paths rather than directly interpolating them into natural language prompts. The attack surface is minimal and inherent to the skill's purpose.
Audit Metadata