skills/tfcbot/rawugc-skills/ugc-b2c/Gen Agent Trust Hub

ugc-b2c

Pass

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill consists entirely of Markdown templates and instructional guidelines for video prompt generation. It does not include any executable code, scripts, or binary files that could pose a runtime risk.
  • [SAFE]: The requirement for a RAWUGC_API_KEY environment variable is clearly documented in the YAML frontmatter as a necessary configuration for the associated rawugc-api tool. This follows standard security practices for secret management by not hardcoding credentials.
  • [SAFE]: The skill uses placeholders (e.g., [PRODUCT], [BRAND]) to interpolate user data into prompt templates. While this creates a surface for indirect prompt injection, it is the primary intended function of the skill and follows standard templating conventions.
  • [SAFE]: All external references and source links point to the official GitHub repository of the author (tfcbot), which is consistent with the skill's stated purpose and identity.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 21, 2026, 03:13 AM