fal-generate
Pass
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: SAFENO_CODEINDIRECT_PROMPT_INJECTION
Full Analysis
- [NO_CODE]: The skill consists purely of natural language instructions and does not include any scripts, executable binaries, or package dependencies.
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to process user-supplied prompts for media generation, which represents a potential injection surface. 1. Ingestion points: User requests are resolved into prompts for image/video generation. 2. Boundary markers: Instructions require the agent to resolve intended use and success criteria before submission. 3. Capability inventory: Implicit network interaction with the fal.ai integration; no local file-system or shell capabilities are provided by the skill itself. 4. Sanitization: The skill explicitly directs the agent to confirm safety boundaries and privacy scopes.
- [SAFE]: No malicious patterns, prompt injections, or unauthorized data access attempts were detected. The skill references fal.ai, which is a well-known media generation service.
Audit Metadata