sharing-results

Pass

Audited by Gen Agent Trust Hub on Sep 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses the watch-skill command via the Bash tool to generate HTML viewer pages and extract bug reports. This is a core function of the skill using a vendor-specific CLI tool.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external data such as video frames, transcripts, and OCR text which are then included in the generated HTML report.
  • Ingestion points: Video source, transcripts, and OCR data identified in the SKILL.md description and commands.
  • Boundary markers: No specific delimiters or instruction-ignore markers are specified for the processed video data.
  • Capability inventory: Bash tool is used for executing the watch-skill report generation commands (found in SKILL.md).
  • Sanitization: The skill does not explicitly mention sanitization of OCR or transcript data before inlining it into the HTML viewer.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 9, 2026, 11:18 AM