revid-news-to-daily-short
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill implements a news-fetching feature (
fetchNews: true) that allows the underlying service to ingest data from external sources. - Ingestion points: Live news content and articles retrieved by the Revid API from the internet (SKILL.md).
- Boundary markers: The skill does not define specific delimiters or "ignore" instructions to protect the agent from malicious content embedded in the fetched news.
- Capability inventory: The skill possesses capabilities to render video, check project status, and publish content through the Revid MCP server.
- Sanitization: Sanitization of the untrusted web data is handled by the vendor's API service rather than the skill's local logic.
- [COMMAND_EXECUTION]: The example testing script uses standard command-line utilities.
- Evidence:
examples/run.shexecutescurlto communicate with the API andjqto process the returned JSON data. - [EXTERNAL_DOWNLOADS]: The skill facilitates communication with the vendor's API endpoints for video processing.
- Evidence: Interacts with
https://www.revid.ai/api/public/v3/renderandhttps://www.revid.ai/api/public/v3/statusin the provided bash script.
Audit Metadata