ai-video-generation

Pass

Audited by Gen Agent Trust Hub on Sep 2, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the belt-sh/cli tool and related components using the npx skills add command. It also provides links to installation scripts hosted on a public GitHub repository (github.com/inference-sh/skills).
  • [COMMAND_EXECUTION]: The skill utilizes Bash to execute belt CLI commands. This execution is restricted by the skill's configuration to only allow the belt binary, implementing a principle of least privilege.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-provided prompts that are passed as arguments to video generation models. This creates a surface for indirect prompt injection where crafted inputs could attempt to manipulate the generation output or the agent's execution flow. * Ingestion points: User prompt strings in belt app run commands (SKILL.md). * Boundary markers: No specific delimiters or safety warnings are included to isolate user input. * Capability inventory: Access to Bash restricted to the belt CLI. * Sanitization: The instructions do not define any sanitization or validation logic for external inputs.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 2, 2026, 02:20 PM
Security Audit — agent-trust-hub — ai-video-generation