video-toolkit
Pass
Audited by Gen Agent Trust Hub on Oct 26, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the user to use the
--break-system-packagesflag withpip3during setup. This bypasses PEP 668 protections on modern Linux distributions, which are intended to prevent conflicts between the system package manager and Python's pip. While common in containerized environments, it can affect host system stability. - [EXTERNAL_DOWNLOADS]: The skill requires the installation of the
modallibrary and various Python dependencies from a localrequirements.txtfile. - [DYNAMIC_EXECUTION]: The skill uses
modal deployto send local application code from thedocker/directory to the Modal cloud platform. This effectively creates and runs remote serverless functions controlled by the skill's code. - [INDIRECT_PROMPT_INJECTION]: The toolkit processes a text brief provided by the user to generate voiceovers, images, and video clips. This input is interpolated into command-line prompts for cloud-based AI models.
- Ingestion points: User input in
VOICEOVER-SCRIPT.mdand configuration values indemo-config.ts. - Boundary markers: None present in the instruction examples.
- Capability inventory: Scripts perform subprocess calls to AI generation tools which interact with remote APIs.
- Sanitization: No sanitization or escaping is mentioned for the user-provided text before it is passed to shell commands.
Audit Metadata