p-video
Pass
Audited by Gen Agent Trust Hub on Apr 9, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill refers to installation instructions and additional skill modules hosted on the official GitHub repository for the inference.sh platform.
- [PROMPT_INJECTION]: The skill exhibits a surface for indirect prompt injection:
- Ingestion points: User-supplied
prompt,imageURL, andaudioURL are processed inSKILL.mdvia the inference.sh command-line interface. - Boundary markers: Absent; no delimiters or instructions to ignore embedded commands are present in the command templates or examples.
- Capability inventory: The skill executes shell commands via the Bash tool using the
infshCLI application. - Sanitization: There is no evidence of input validation, filtering, or escaping before data is passed to the execution tool.
Audit Metadata