marketing-video

Pass

Audited by Gen Agent Trust Hub on Aug 8, 2026

Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill provides legitimate documentation and workflows for video production using tools like HeyGen, Runway, and Hyperframes.
  • [COMMAND_EXECUTION]: Provides standard instructions for installing and initializing developer frameworks.
  • Evidence: npm install hyperframes and npx create-video@latest in SKILL.md.
  • [PROMPT_INJECTION]: Identifies a potential attack surface for indirect prompt injection through context files, which is a standard part of the skill's workflow.
  • Ingestion points: Reads .agents/product-marketing.md or .claude/product-marketing.md to gather context (SKILL.md).
  • Boundary markers: Absent.
  • Capability inventory: Generates HTML/JS code for Hyperframes and calls HeyGen MCP tools.
  • Sanitization: Absent.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 8, 2026, 02:46 PM
Security Audit — agent-trust-hub — marketing-video