clipforge-video
Pass
Audited by Gen Agent Trust Hub on Oct 11, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill is designed to ingest and process potentially untrusted content from external sources, which could contain malicious instructions. • Ingestion points: Untrusted data enters the agent context through
clipforge_ingest_product(URL),clipforge_product_script(URL/image), andclipforge_transcript_inspect(media transcripts). • Boundary markers: The skill includes a 'Hard Rule' (Rule 7) instructing the agent to treat fetched content strictly as data and never as instructions, providing a behavioral boundary. • Capability inventory: The skill has extensive capabilities including triggering video composition, searching stock footage, and managing local media assets via an API. • Sanitization: No technical sanitization or filtering of the external text is mentioned before it is processed by the language model. - [COMMAND_EXECUTION]: The skill documentation provides instructions for executing commands on the host machine to operate the video production toolchain. • Evidence: Documentation references the use of
node bin/clipforge.mjsfor CLI operations andpnpm devorpnpm startto run the local API server. • Evidence: The skill requires and interacts with theffmpegbinary for media composition. - [EXTERNAL_DOWNLOADS]: The skill involves the installation of external components and the fetching of remote media assets. • Evidence: The skill suggests installation using
npx skills add xixihhhh/clipforge. • Evidence: The video pipeline fetches stock footage and metadata from external providers through theclipforge_search_stocktool.
Audit Metadata