skills/marswaveai/skills/video-gen/Gen Agent Trust Hub

video-gen

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes listenhub CLI subcommands to interface with video generation models. It includes logic to auto-install the required CLI tool and uses ffprobe for local media metadata extraction.
  • [EXTERNAL_DOWNLOADS]: Automatically installs the @marswave/listenhub-cli package from the NPM registry to ensure the video command is available. It also uses curl to download the final generated video file from a remote URL to the user's local directory.
  • [INDIRECT_PROMPT_INJECTION]: The skill accepts arbitrary text prompts and media URLs from the user which are then used as parameters for external AI models. While this creates a potential injection surface for the model, the skill implements strict parameter validation and clear user confirmation gates before execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 04:40 AM