revid-article-to-short
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests content from external URLs provided by the user, which serves as a vector for indirect prompt injection attacks.
- Ingestion points: The
urlparameter defined inSKILL.mdand thesource.urlfield within therender_videotool arguments. - Boundary markers: There are no explicit delimiters or specific instructions provided to the agent to disregard instructions that might be contained within the article body.
- Capability inventory: The skill utilizes the
render_videoandget_project_statusMCP tools, and provides a utility script (examples/run.sh) capable of performing network operations viacurl. - Sanitization: No sanitization or filtering of the article content is implemented before it is passed to the video generation workflow.
- [COMMAND_EXECUTION]: The skill includes a shell script (
examples/run.sh) that executes commands to interact with the Revid API. - The script uses
curlto perform HTTP POST and GET requests tohttps://www.revid.ai/api/public/v3/for rendering and status tracking. - The script utilizes
jqfor parsing JSON responses. - These commands are intended for manual testing and smoke testing of the API integration.
Audit Metadata