vos-footage
Pass
Audited by Gen Agent Trust Hub on Sep 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute various
vosCLI commands, such asrecord,render,validate, andpush, to automate a video production workflow. - [INDIRECT_PROMPT_INJECTION]: The skill processes an
actions.jsonfile to guide thevos recordcommand, creating a surface for indirect instructions. - Ingestion points:
actions.json(referenced inSKILL.md). - Boundary markers: None specified for the input file content.
- Capability inventory: Subprocess execution via
vosCLI tools for recording and file management. - Sanitization: The instructions do not define methods for validating or escaping the contents of the configuration file.
Audit Metadata