sync-lipsync
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions prompt the agent to fetch additional model reference and polling logic from the official Pixazo documentation at
pixazo.ai. It also references a package installation command for related skills vianpx. - [COMMAND_EXECUTION]: Provides Bash, Python, and Node.js code samples for the agent to execute
curland HTTP requests to thegateway.pixazo.aiendpoint for video generation tasks. - [INDIRECT_PROMPT_INJECTION]: The agent is instructed to read external content from
pixazo.aito determine runtime API schemas, representing a potential ingestion point for external data. - Ingestion points:
SKILL.md(instructions to fetchhttps://www.pixazo.ai/models/sync-lipsync.md) - Boundary markers: Absent
- Capability inventory: Shell execution (
curl), file write access (~/.pixazo/api-key), network operations via HTTP POST/GET - Sanitization: Absent
Audit Metadata