skills/vidmoat/skills/beat-sync/Gen Agent Trust Hub

beat-sync

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
  • [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to ingest and process data returned by the audio_inspect tool, such as BPM and beat markers, which constitutes an external data ingestion surface.
  • Ingestion points: Data from audio_inspect results (bpm, beatOffset, beatTimes, downbeatTimes) are used to drive timeline actions in SKILL.md.
  • Boundary markers: The instructions do not specify explicit delimiters or warnings to ignore embedded instructions in the audio metadata.
  • Capability inventory: The skill utilizes video editing capabilities including addMarkers, sliceClip, snapToBeat, setKeyframeTrack, applyCameraShake, addEffect, and applyMotionPreset.
  • Sanitization: There is no mention of sanitizing or validating the technical metadata received from the audio analysis tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 12:45 PM