scenario-vidu
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text prompts and image assets to generate video content, representing a standard interaction surface.
- Ingestion points: User-provided data enters via the
promptandimagesparameters inSKILL.mdfor use with themodel_runtool. - Boundary markers: No specific delimiters or "ignore instructions" markers are provided for user-supplied data.
- Capability inventory: Tool access includes
upload_asset,model_run,search,jobs_wait, andasset_display(defined in related skills). - Sanitization: No explicit input sanitization or filtering logic is described in the skill instructions.
- [EXTERNAL_DOWNLOADS]: The documentation suggests the installation of additional tools from the vendor's own repository (
scenario-labs/skills) vianpxto support extended functionality.
Audit Metadata