intro-video

Pass

Audited by Gen Agent Trust Hub on Sep 23, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill fetches additional composition logic from the vendor's GitHub repository (github.com/okou-ai/okou-skills.git) if the required resources are not locally present. This is documented as a standard vendor resource update mechanism for the okou-ai author.- [DYNAMIC_EXECUTION]: The skill utilizes npx to execute specific, pinned versions of the hyperframes library (e.g., version 0.8.26). It also invokes a Python script for image processing during the quality assurance phase to generate tiled previews of video frames using standard libraries like json and subprocess.- [COMMAND_EXECUTION]: A comprehensive set of managed CLI tools is used for video operations, including okou video render for cloud-based rendering and okou __intro-video-agent for HeyGen API interactions. These tools rely on platform-managed credentials rather than hardcoded secrets. The skill also invokes local media utilities such as ffmpeg and ffprobe for file validation.- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process untrusted user inputs (text and attachments) to create video content.
  • Ingestion points: User-supplied prompts, screen recordings, and various file attachments (PDF, DOCX, etc.) processed in SKILL.md Step 1 and references/input-preparation.md.
  • Boundary markers: The skill includes explicit instructions to treat attachment contents as source material and never as instructions, and employs highly structured prompt skeletons in references/prompt-compiler.md to maintain control.
  • Capability inventory: Capabilities include cloud rendering (okou video render), network API interaction, and local media processing using ffmpeg and python3.
  • Sanitization: Inputs are normalized into a strict brief structure before being interpolated into final prompts, with facts extracted and verified to prevent the interpretation of data as instructions.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 23, 2026, 05:06 PM
Security Audit — agent-trust-hub — intro-video