video-to-music

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the sonilo and sonilo-cli packages via standard package managers (pip and npm). These packages are vendor-controlled resources for interacting with the scoring service.
  • [COMMAND_EXECUTION]: The skill uses the Bash tool to run CLI commands for authentication and video scoring operations.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted video content and user prompts, which creates a surface for potential instructions to be processed by the model.
  • Ingestion points: External video files (via paths or URLs) and text prompts processed in SKILL.md.
  • Boundary markers: Absent; there are no specific markers used to distinguish between instructions and video data.
  • Capability inventory: The skill leverages Bash for command execution and Write for file creation based on functionality defined in SKILL.md.
  • Sanitization: Absent; no validation or sanitization of video data is mentioned before processing by the scoring model.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 04:25 AM