pixverse-ai-image-and-video-generator
Pass
Audited by Gen Agent Trust Hub on Mar 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires installing the 'pixverse' package from the NPM registry. This is the official CLI tool for the PixVerse platform.
- [COMMAND_EXECUTION]: The skill instructions utilize the 'pixverse' CLI to perform media generation, task management, and asset handling.
- [PROMPT_INJECTION]: The skill processes untrusted user prompts and external media URLs.
- Ingestion points: Prompts and file paths/URLs are ingested via flags in 'pixverse create' commands across multiple files (e.g., create-video.md, create-and-edit-image.md).
- Boundary markers: No explicit delimiters or instructions to ignore embedded commands are present in the prompt templates.
- Capability inventory: The skill can execute local CLI commands, perform network requests to the PixVerse API, and download files to the local system.
- Sanitization: There is no documentation of input sanitization or validation within the skill's instructions.
Audit Metadata