byted-kickart-video-elements-replace
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes shell commands using
npm execto interact with the KickArt CLI (kickart-open-cli) for task submission and status queries.\n- [EXTERNAL_DOWNLOADS]: Fetches the vendor-owned package@volcengine/kickart-open-mcpfrom the official npm registry (https://registry.npmjs.org) at runtime.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted user input, including descriptive prompts and external media URLs, which are then passed to the command-line interface.\n - Ingestion points: Media URLs and local paths collected in
references/视频参考指南.mdandreferences/替换图片指南.md; natural language descriptions collected inreferences/视频元素替换指南.md.\n - Boundary markers: CLI arguments are wrapped in double quotes; however, there are no specific filters to prevent instructions within the
promptstring from influencing the agent's logic if processed further.\n - Capability inventory: Execution of shell commands via
npm execfor task management (SKILL.md).\n - Sanitization: The instructions explicitly advise against manual string concatenation for shell commands to mitigate injection risks.
Audit Metadata