video-i2v
Pass
Audited by Gen Agent Trust Hub on May 12, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
uvxto execute thevideoclawpackage from the Python Package Index (PyPI). This is a standard and legitimate method for running Python-based utilities without permanent installation.- [COMMAND_EXECUTION]: The skill facilitates the execution of thevideoclawCLI tool. It passes user-provided arguments such as project names, image paths, and text prompts directly to the CLI, which is consistent with its intended purpose.- [PROMPT_INJECTION]: There is a surface for indirect prompt injection as user-supplied text for the--promptargument is interpolated into a command. However, the risk is minimal as the input is passed as an argument to a specialized video generation tool and not used to override agent behavior.
Audit Metadata