video-frame-api
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to use
curlfor API requests andchmod 600to secure the local API key file. These actions are standard for interacting with REST APIs and following security best practices for secret management. - [EXTERNAL_DOWNLOADS]: The skill references official documentation and schemas hosted at
www.pixazo.ai. As these are vendor-owned resources used for configuration and reference, they do not pose a security risk. - [INDIRECT_PROMPT_INJECTION]: The skill accepts user-provided prompts and image metadata to build API payloads. This represents a standard ingestion surface, and the risk is mitigated by using structured JSON requests sent to a trusted vendor gateway.
- [CREDENTIALS_UNSAFE]: The skill correctly avoids hardcoding secrets, instead instructing the agent to retrieve the API key from environment variables or a secure local file, which is a recommended security practice.
Audit Metadata