revid-tweet-to-talking-head
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes an example shell script (
examples/run.sh) that usescurlandjqto interact with the Revid API. This is a standard utility for developers to test the integration. - [EXTERNAL_DOWNLOADS]: The skill communicates with the Revid API at
revid.aito submit video rendering requests and poll for project status. This behavior is documented and necessary for the skill's primary function. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external content from social media platforms, which introduces an attack surface for indirect prompt injection.
- Ingestion points: The
textandurlparameters within therender_videotool calls inSKILL.mdaccept untrusted content from social media posts. - Boundary markers: No specific boundary delimiters are defined to separate ingested text from instructions.
- Capability inventory: The skill utilizes
render_videoandget_project_statustools to process data and retrieve results. - Sanitization: The instructions recommend pre-cleaning text (e.g., stripping URLs and handles) to improve the quality of the generated voiceover, which provides a minor level of sanitization.
Audit Metadata