sjinn-video-generation
Pass
Audited by Gen Agent Trust Hub on Sep 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because it incorporates untrusted data from user prompts and external media URLs into its execution flow.
- Ingestion points: User-provided text for the
--promptargument and external URLs provided via--image,--media-urls, and other media options inSKILL.mdandreferences/models.md. - Boundary markers: There are no markers or instructions defined to prevent the agent from following malicious commands embedded within the user prompt or the metadata of external media.
- Capability inventory: The skill executes shell commands via the
sjinnCLI, which can interact with the file system and perform network uploads. - Sanitization: The instructions do not include steps to sanitize or validate user input before it is passed to the shell commands.
- [COMMAND_EXECUTION]: The skill facilitates the execution of shell commands using the
sjinnCLI to perform video generation and authentication tasks.
Audit Metadata