Skills
skills/cinience/alicloud-skills/aliyun-kling-video/Gen Agent Trust Hub

aliyun-kling-video

Pass

Audited by Gen Agent Trust Hub on Apr 4, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The validation procedures in SKILL.md perform benign shell operations for environment preparation, including directory creation (mkdir) and Python script compilation (py_compile).
  • [EXTERNAL_DOWNLOADS]: The skill facilitates network requests to Alibaba Cloud's well-known DashScope API domain (dashscope.aliyuncs.com) to manage video generation tasks.
  • [CREDENTIALS_UNSAFE]: The skill adheres to security best practices by instructing users to provide the DASHSCOPE_API_KEY via environment variables, avoiding hardcoded secrets within the code or documentation.
  • [PROMPT_INJECTION]: The skill ingests user-supplied prompts through the prompt parameter in scripts/generate_kling_video.py which are interpolated into API payloads without boundary markers or sanitization. While this represents a surface for indirect prompt injection, the risk is negligible as the capabilities are confined to content generation on official infrastructure.
Audit Metadata
Risk Level
SAFE
Analyzed
Apr 4, 2026, 02:31 PM