skills/whq25/rawgenai/agent-gen-video/Gen Agent Trust Hub

agent-gen-video

Pass

Audited by Gen Agent Trust Hub on Oct 12, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the user to install an external tool, rawgenai, from the author's Homebrew tap (WHQ25/tap/rawgenai). This involves downloading and executing a third-party package manager formula.
  • [COMMAND_EXECUTION]: The skill's primary functionality is delivered through the execution of shell commands using the rawgenai CLI. This tool is used for configuration, video generation, status checking, and downloading results.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text and external media files, creating a surface for potential prompt injection.
  • Ingestion points: User-provided text prompts and file paths for images or videos are ingested via command-line arguments in SKILL.md and provider-specific reference files (e.g., references/video/openai.md, references/video/google.md).
  • Boundary markers: The instructions do not specify any delimiters or warnings to ignore instructions embedded within the processed media or prompts.
  • Capability inventory: The skill has the capability to execute shell commands (rawgenai) as documented in SKILL.md and across all files in the references/video/ directory.
  • Sanitization: There is no mention of input sanitization, validation, or escaping for the prompts or file inputs before they are passed to the CLI tool.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 12, 2026, 01:32 AM