videodb-skills
Pass
Audited by Gen Agent Trust Hub on Aug 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
videodbPython package andpython-dotenvfrom standard registries. It also usesnpxto add thevideo-db/skillscomponent, which is standard for the installation of this specific toolset.- [PROMPT_INJECTION]: The skill has a surface for indirect prompt injection because it ingests untrusted data from external sources like YouTube and remote video URLs via theUploadcapability inSKILL.md. There are no explicit boundary markers or sanitization steps described in the instructions. The skill utilizes transcription and AI media generation capabilities, which could potentially process and act upon malicious instructions embedded within the audio or metadata of the ingested files.
Audit Metadata