vertex-ai-media-master
Pass
Audited by Gen Agent Trust Hub on Apr 8, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No malicious prompt injection or safety bypass attempts were detected. The instructions are focused on legitimate orchestration of Vertex AI models for media analysis and generation.
- [DATA_EXFILTRATION]: No data exfiltration patterns identified. The skill requires standard Google Cloud authentication and project configuration, but it does not attempt to send credentials or project data to external or untrusted destinations.
- [REMOTE_CODE_EXECUTION]: No remote code execution vulnerabilities found. Dependencies mentioned are official Google Cloud Python packages. There are no patterns involving downloading and executing untrusted scripts.
- [OBFUSCATION]: No obfuscation, encoding, or hidden content detected in any of the skill files or examples.
- [COMMAND_EXECUTION]: The skill uses the Bash tool for environment setup and package installation, which is appropriate for its stated purpose of managing a Google Cloud development environment.
- [INDIRECT_PROMPT_INJECTION]: The skill processes external media assets (videos, images, marketing briefs). This is an inherent surface for indirect prompt injection if the assets contain adversarial content intended to influence the agent's behavior.
- Ingestion points: Video analysis and asset repurposing workflows in
SKILL.mdandreferences/examples.md. - Boundary markers: Not explicitly implemented in the provided prompt templates.
- Capability inventory: The skill has access to
Bash,Read,Write, andEdittools. - Sanitization: Not present; relies on the underlying Vertex AI model's built-in safety filters.
Audit Metadata