skills/volcengine/byted-kickart-skills/byted-kickart-marketing-material-generator/Gen Agent Trust Hub
byted-kickart-marketing-material-generator
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using
npm execto interact with the@volcengine/kickart-open-mcpCLI tool for authentication, material uploading, and task submission. These operations are restricted to a specific vendor-owned package. - [EXTERNAL_DOWNLOADS]: The skill downloads the required CLI package from the official npm registry (
registry.npmjs.org). As this is a well-known service and the package is provided by the skill author (Volcengine), this is considered standard operational behavior. - [INDIRECT_PROMPT_INJECTION]: The skill processes external data including product URLs, product IDs, and user-provided creative prompts.
- Ingestion points: User-provided inputs are collected in
references/一键成片指南.mdandreferences/视频参考指南.md. - Boundary markers: The skill mandates a two-step confirmation process in
references/一键成片指南.md(Phase 0, steps 11 and 12), requiring the agent to display all collected information and obtain explicit user consent before proceeding. - Capability inventory: The skill has the ability to execute shell commands and read local media files via the KickArt CLI.
- Sanitization: The skill performs local validation on file formats, sizes, and metadata before transmission.
Audit Metadata