ai-video-generation
Pass
Audited by Gen Agent Trust Hub on Mar 27, 2026
Risk Level: SAFEPROMPT_INJECTIONCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
infshCLI tool to execute AI model workloads. This is limited to the specific command via theallowed-toolsrestriction in the frontmatter. - [EXTERNAL_DOWNLOADS]: The documentation suggests installing additional related skills from the
inference-shorganization usingnpx skills add. These are vendor-owned resources and are part of the intended functionality. - [PROMPT_INJECTION]: The skill processes untrusted data which creates a surface for indirect prompt injection.
- Ingestion points: The skill accepts user-provided strings for
promptand external URLs forimage_url,video_url, andaudio_urlwithin the JSON input to theinfshcommand. - Boundary markers: No explicit boundary markers or instructions to ignore embedded commands are present in the provided examples.
- Capability inventory: The skill possesses the capability to execute shell commands via the
infshtool, which interacts with remote AI services. - Sanitization: There is no evidence of input sanitization or validation for the URLs or prompt content within the skill instructions.
Audit Metadata