image-to-video
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes local media utilities, specifically
ffprobeto check the duration of generated narration andffmpegto mix background audio tracks. - [EXTERNAL_DOWNLOADS]: The documentation provides commands to install auxiliary skills from the vendor's repository (
PrunaAI/pruna-skills) using thenpx skills addcommand. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process user-supplied media and prompts for video generation.
- Ingestion points: User-provided photos for frames and motion prompts described in the intake section (SKILL.md).
- Boundary markers: None explicitly defined for user-supplied prompts.
- Capability inventory: Local execution of media utilities (
ffmpeg,ffprobe) and file uploads to the vendor's API. - Sanitization: The skill documentation explicitly requires data handling via
pruna-apifor agent safety before any uploads or paid calls are performed.
Audit Metadata