product-promo-video
Pass
Audited by Gen Agent Trust Hub on Nov 2, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill uses subprocesses for media manipulation and tool execution with secure list-based arguments, preventing shell command injection.- [EXTERNAL_DOWNLOADS]: All external tools and libraries, including Puppeteer and Lucide icons, are sourced from standard package registries for legitimate functionality.- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from external websites via scraping but applies HTML escaping and character sanitization in its rendering engine to prevent malicious content from executing.- [DATA_EXPOSURE]: No evidence of sensitive file access or credential harvesting was found; the skill operates within its intended workspace.
Audit Metadata