video-gen
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
listenhubCLI subcommands to interface with video generation models. It includes logic to auto-install the required CLI tool and usesffprobefor local media metadata extraction. - [EXTERNAL_DOWNLOADS]: Automatically installs the
@marswave/listenhub-clipackage from the NPM registry to ensure thevideocommand is available. It also usescurlto download the final generated video file from a remote URL to the user's local directory. - [INDIRECT_PROMPT_INJECTION]: The skill accepts arbitrary text prompts and media URLs from the user which are then used as parameters for external AI models. While this creates a potential injection surface for the model, the skill implements strict parameter validation and clear user confirmation gates before execution.
Audit Metadata