video-compress-api
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill provides sample shell commands for making API requests via
curland recommends setting file permissions usingchmod 600on a local configuration file. These are standard development practices for the intended purpose. - [EXTERNAL_DOWNLOADS]: The skill instructions direct the agent to fetch a reference markdown file from
https://www.pixazo.ai/models/video-compress-api.mdto get the full API specification. This is a trusted source belonging to the vendor. - [INDIRECT_PROMPT_INJECTION]: The skill has the surface area for indirect injection by ingesting external video URLs and processing documentation from a remote server. However, it follows the specific author's operational model and does not display malicious intent.
- [CREDENTIALS_UNSAFE]: The skill provides guidance on storing and retrieving API keys from environment variables or a local file (
~/.pixazo/api-key). It correctly advises on restricting file permissions to the current user.
Audit Metadata