video-denoise-enhance
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTIONCREDENTIALS_UNSAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill executes the
meitubinary to perform video processing. It uses the patternmeitu video-denoise-enhance --video_url {url} --json --download-dir {output_dir}. - [PROMPT_INJECTION]: The skill contains an indirect prompt injection surface (Category 8).
- Ingestion points: The
video_urlprovided by the user is ingested directly into the command template. - Boundary markers: There are no boundary markers or delimiters surrounding the
{url}variable to prevent argument injection if a malicious URL is provided. - Capability inventory: The skill has
execpermissions for themeitubinary andfile_writepermissions for local directories. - Sanitization: No validation or escaping of the user-provided URL is specified before it is passed to the shell execution environment.
- [CREDENTIALS_UNSAFE]: The skill is configured to read authentication keys from
~/.meitu/credentials.json. This behavior is expected as the skill author ('meitu') is accessing its own service credentials for the CLI tool.
Audit Metadata