ai-video-generation
Pass
Audited by Gen Agent Trust Hub on Feb 25, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the installation of the
infshCLI tool by downloading a shell script fromhttps://cli.inference.shand piping it directly to the shell. This is a common pattern for CLI tools, and the domain belongs to the vendor (inference-sh-9) as specified in the author context. - [COMMAND_EXECUTION]: The skill requires access to the
Bashtool to executeinfshcommands. These commands are used for user authentication (infsh login), model listing (infsh app list), and running video generation tasks (infsh app run). - [PROMPT_INJECTION]: The skill processes user-provided strings as prompts for video generation. While this represents a surface for indirect prompt injection, the use of structured JSON input for the CLI tools helps mitigate accidental command injection, and the risk level for this category is inherently low.
Audit Metadata