openclip
Pass
Audited by Gen Agent Trust Hub on Aug 23, 2026
Risk Level: SAFEPROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data, creating a potential surface for indirect prompt injection.
- Ingestion points: Video transcripts (
get_transcript) and clip metadata including titles and hooks (list_clips) are retrieved from external videos submitted by users. - Boundary markers: There are no specific instructions or delimiters provided to the agent to treat transcript content as untrusted data or to ignore embedded instructions.
- Capability inventory: The skill possesses network capabilities via tools like
submit_videoandcreate_uploadfor handling media files. - Sanitization: The instructions do not define any sanitization or filtering of the content retrieved from external video sources before it is processed by the agent.
- [EXTERNAL_DOWNLOADS]: The skill documentation references external packages for installation.
- The
SKILL.mdfile suggests installing focused sub-skills using the commandnpx skills add OpenClip-App/agent-skills, which targets the author's official repository.
Audit Metadata