ugc-b2c
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill consists entirely of Markdown templates and instructional guidelines for video prompt generation. It does not include any executable code, scripts, or binary files that could pose a runtime risk.
- [SAFE]: The requirement for a
RAWUGC_API_KEYenvironment variable is clearly documented in the YAML frontmatter as a necessary configuration for the associatedrawugc-apitool. This follows standard security practices for secret management by not hardcoding credentials. - [SAFE]: The skill uses placeholders (e.g.,
[PRODUCT],[BRAND]) to interpolate user data into prompt templates. While this creates a surface for indirect prompt injection, it is the primary intended function of the skill and follows standard templating conventions. - [SAFE]: All external references and source links point to the official GitHub repository of the author (
tfcbot), which is consistent with the skill's stated purpose and identity.
Audit Metadata