soldy
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is a standard integration for the Soldy AI service, providing tools for media generation and task management through the official
soldy.aidomain. - [SAFE]: The skill identifies and uploads local files provided by the user to the vendor's API for processing. This is a core part of its functionality and is clearly documented as the mechanism for working with local assets.
- [SAFE]: No hardcoded credentials were found; the skill provides guidance on using environment variables for API key management, which is consistent with secure development practices.
- [SAFE]: The skill possesses a surface for indirect prompt injection as it ingests untrusted data from user prompts and media assets, which is a standard characteristic for this type of tool.
- Ingestion points:
prompt,input_assets(local files and URLs) inSKILL.md. - Boundary markers: None specified.
- Capability inventory: Tool calls to
soldy.aifor media generation. - Sanitization: None specified.
Audit Metadata