google-veo
Pass
Audited by Gen Agent Trust Hub on Nov 14, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to pass user-provided prompt text directly into the
beltCLI tool for video generation. This creates a surface where maliciously crafted prompts could attempt to influence the agent's behavior. * Ingestion points: Prompt values in the JSON input forbelt app runcommands inSKILL.md. * Boundary markers: None specified in the instructions to separate data from instructions. * Capability inventory: Execution of thebelttool via Bash (restricted by frontmatter to thebeltcommand). * Sanitization: No explicit sanitization or validation steps are defined for the input prompts.
Audit Metadata