generate-video

Pass

Audited by Gen Agent Trust Hub on Jun 25, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill connects to the Wavespeed API (wavespeed.ai) to generate videos. This is the intended primary purpose of the skill and uses the official API endpoints documented at wavespeed.ai/docs.
  • [COMMAND_EXECUTION]: The skill instructs the agent to save generated MP4 files to the local file system at CWD/generate-video-<timestamp>/clip.mp4. This is a standard file operation for a video generation tool.
  • [CREDENTIALS_UNSAFE]: The skill requires a WAVESPEED_API_KEY to be provided via environment variables. This follows security best practices for secret management by not hardcoding credentials within the skill itself.
  • [PROMPT_INJECTION]: The skill includes instructions for the agent to refine user-provided ideas into structured prompts. There are no signs of malicious overrides, bypasses, or instructions to ignore safety guidelines.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 25, 2026, 08:28 PM
Security Audit — agent-trust-hub — generate-video