ai-podcast
Pass
Audited by Gen Agent Trust Hub on Nov 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill ingests and processes untrusted user data to generate video and audio content, creating a surface for indirect instructions.
- Ingestion points: User-provided script text for
inworld/text-to-speech-2, training images forphota/train, andvideo_promptforpruna/p-video-avatar. - Boundary markers: None; external content is interpolated directly into JSON payloads for shell commands.
- Capability inventory: The skill uses
Bashto execute model inference commands andWriteto save configuration and results. - Sanitization: No validation or escaping is applied to the input text or image URLs before they are passed to the external AI models.
- [SAFE]: The skill integrates with established external services including Google Gemini for image generation and Inworld for text-to-speech, which is appropriate for its primary purpose of media production.
Audit Metadata