revid-shopify-product-promo
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill interacts with the Revid.ai API (at
https://www.revid.ai/api/public/v3/renderandhttps://www.revid.ai/api/public/v3/status) to submit video rendering jobs and poll for status. This is the primary intended function of the skill and uses the vendor's official service. - [COMMAND_EXECUTION]: The provided utility script
examples/run.shuses standard CLI tools (curl,jq) to demonstrate interaction with the Revid API. The script safely incorporates user input viajqarguments to prevent command injection. - [INDIRECT_PROMPT_INJECTION]: The skill processes content from external product URLs by passing them to the Revid service for scraping. The instructions include a
scrapingPromptto focus the extraction on specific product data, which serves as a functional boundary. The capability is restricted to generating video metadata and does not expose local sensitive resources.
Audit Metadata