ai-video-generation

Pass

Audited by Gen Agent Trust Hub on Feb 25, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the infsh CLI tool by downloading a shell script from https://cli.inference.sh and piping it directly to the shell. This is a common pattern for CLI tools, and the domain belongs to the vendor (inference-sh-9) as specified in the author context.
  • [COMMAND_EXECUTION]: The skill requires access to the Bash tool to execute infsh commands. These commands are used for user authentication (infsh login), model listing (infsh app list), and running video generation tasks (infsh app run).
  • [PROMPT_INJECTION]: The skill processes user-provided strings as prompts for video generation. While this represents a surface for indirect prompt injection, the use of structured JSON input for the CLI tools helps mitigate accidental command injection, and the risk level for this category is inherently low.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 25, 2026, 05:36 PM