video-to-music
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for installing the
soniloandsonilo-clipackages via standard package managers (pip and npm). These packages are vendor-controlled resources for interacting with the scoring service. - [COMMAND_EXECUTION]: The skill uses the
Bashtool to run CLI commands for authentication and video scoring operations. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted video content and user prompts, which creates a surface for potential instructions to be processed by the model.
- Ingestion points: External video files (via paths or URLs) and text prompts processed in
SKILL.md. - Boundary markers: Absent; there are no specific markers used to distinguish between instructions and video data.
- Capability inventory: The skill leverages
Bashfor command execution andWritefor file creation based on functionality defined inSKILL.md. - Sanitization: Absent; no validation or sanitization of video data is mentioned before processing by the scoring model.
Audit Metadata