video-multimodal-generate
Pass
Audited by Gen Agent Trust Hub on Jun 15, 2026
Risk Level: SAFECOMMAND_EXECUTIONCREDENTIALS_UNSAFEPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill invokes the
meitubinary via the shell to perform video generation tasks. - [CREDENTIALS_UNSAFE]: The skill is configured to read authentication keys from
~/.meitu/credentials.jsonto facilitate API access for the meitu-cli tool. - [PROMPT_INJECTION]: The skill interpolates untrusted user data, including the text
promptand multiple URL lists, directly into a shell command string. This creates a potential indirect command injection surface where malicious input could attempt to execute arbitrary shell commands via subshell syntax or command separators.
Audit Metadata