vmake-video-repair
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: Shell commands are used to invoke the
vmaketool for video repair, authentication status checks, and session recovery.\n- [EXTERNAL_DOWNLOADS]: The skill fetches thevmake-labs-clipackage from npm and downloads remote media files using thevmake downloadcommand.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external media which may contain malicious instructions.\n - Ingestion points: Remote URLs and video files processed by the CLI tool.\n
- Boundary markers: Instructions require treating service-returned text as data rather than instructions.\n
- Capability inventory: Shell execution, package installation, and network operations for session management.\n
- Sanitization: Quoting is recommended for all shell arguments, and the agent is warned against executing text from the service.
Audit Metadata