youtube-title-thumbnail-packaging
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFENO_CODE
Full Analysis
- [SAFE]: The skill consists of natural language instructions and organizational guidelines for creative content generation. It does not include executable scripts, binary files, or system-level configuration changes.
- [SAFE]: External references are limited to an official YouTube video (a well-known service) used for educational context regarding video packaging strategies.
- [INDIRECT_PROMPT_INJECTION]: The skill possesses an inherent attack surface as it is designed to process untrusted external data such as video transcripts and production briefs.
- Ingestion points: Processes external content through the 'Ground the actual video' workflow described in
SKILL.md. - Boundary markers: The skill does not explicitly instruct the agent to use delimiters or XML tags to isolate external content from its core instructions.
- Capability inventory: The skill is limited to text generation. While the instructions mention not modifying YouTube metadata without authorization, no specific high-risk tools (network, file-write, or shell) are requested in the configuration.
- Sanitization: No explicit sanitization or filtering of input data is defined in the instructions.
Audit Metadata