p-video
Pass
Audited by Gen Agent Trust Hub on Apr 16, 2026
Risk Level: SAFE
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied text prompts to generate video content. This represents an ingestion point for untrusted data, though it is the primary intended function of the skill. The execution environment is restricted to the
infshCLI tool viaallowed-toolsconstraints. - Ingestion points: User-provided prompts within the
--inputJSON field forinfsh app runcommands inSKILL.md. - Boundary markers: None explicitly defined in the provided command examples.
- Capability inventory: Execution of
infshcommands via theBashtool, restricted byallowed-toolsinSKILL.md. - Sanitization: The skill instructions do not specify explicit sanitization or escaping of the prompt input before command interpolation.
- [EXTERNAL_DOWNLOADS]: The documentation references external installation instructions and configuration for the
infshCLI tool hosted on the official GitHub repository for the inference-sh platform and documentation site.
Audit Metadata