Versioned security assessment

Report ID: SA-28DC1FC5

6/30/2026, 4:27:18 AM

ai-video-generation security assessment v3

Skill Security Certification Report

Audit History
Audit model: codex Historical report
Skill name
ai-video-generation
Version
v3
Maintainer
inference-sh-9
Source
github.com/inference-sh-9/skills/tree/main/skills/ai-video-generation/
Coverage
1 Files scanned · 178 Lines analyzed
Policy version
Unavailable

Confirmed finding summary

No confirmed security findings

The completed audit recorded no confirmed security findings. This is not proof that the Skill has no side effects.

Installation context

Historical evidence

This report may not describe the currently installable artifact. Open the current Skill page for install guidance.

Open current Skill page

This report does not block or authorize the manifest or ZIP.

The static findings are mostly Markdown command examples and hardcoded documentation or sample media URLs, not hidden executable code. One confirmed high-risk issue remains: the quick start recommends piping a remote installer directly into sh, which creates supply-chain and command-execution risk for users. No evidence found of prompt injection, credential theft, obfuscation, or malicious intent in the reviewed file.

Report position

Historical report

Open audit history before using this report to install.

Audit attestation

Not attestable

The required immutable binding is incomplete.

Human verification

Not verified

No human verification is recorded for this report.

Coverage

1 Files scanned · 178 Lines analyzed

2 items shown for review

Limitations

This report does not claim runtime or sandbox execution and does not prove the absence of side effects.

Evidence chain

Follow the evidence from source binding to the install contract. Available evidence supports verification; it is not a safety guarantee.

  1. Source

    Binding unavailable

  2. Artifact

    Identity incomplete

  3. Audit

    Complete

  4. Install contract

    Open manifest to verify

    Open manifest

Capabilities observed

Observed means this report recorded supporting evidence. Not recorded does not prove that a capability is absent.

Contains scripts

May execute code included with the Skill.

Not recorded by this audit

Network access

May connect to external services.

Observed in 11 evidence locations

Filesystem access

May read or write local files.

Not recorded by this audit

Env variables

May read values from the process environment.

Not recorded by this audit

External commands

May invoke commands or programs outside the Skill.

Observed in 14 evidence locations

Capability review items (2)
High
SKILL.md:17
Remote Installer Piped To Shell
The quick start instructs users to download an installer from a remote URL and execute it directly with sh. This is dangerous because a compromised endpoint, DNS path, or network response could execute arbitrary code before the user can inspect it.
The pipe-to-shell command is explicit on the referenced line. The surrounding text presents it as an installation path, so the risk is real even though malicious intent is not proven.
Medium
SKILL.md:20SKILL.md:76-78SKILL.md:93-95SKILL.md:101-104SKILL.md:134-137
Expected Network Submission To Third-Party Video Models
The skill sends prompts, image URLs, audio URLs, and video URLs to inference.sh apps and downstream model providers. This is core functionality, but users must understand that media inputs and prompts leave the local environment.
The commands clearly run remote inference apps and pass user-provided media or prompt values. This behavior appears legitimate for the skill category but carries privacy and data handling risk.

Risk findings

Confirmed security concerns are separated from items that still need review.

No confirmed security findings were recorded for this completed audit.

Expert evidence

Immutable subject identity, scanner metadata, dismissed matches, and source-level evidence.

Artifact subject

Marketplace commit
Unavailable
Content hash
Unavailable
Tree hash
Unavailable
Skill path
Unavailable
Audit payload hash
Unavailable

Analysis metadata

Audit model: codex

Analysis state: Complete

Scope is limited to the recorded files, lines, methods, and evidence. No runtime or sandbox execution is claimed.

Static false positives ignored (3)
Low
SKILL.md:31-38SKILL.md:44-63SKILL.md:75-151
Markdown Backtick Detections Are False Positives
The static analyzer flagged many model names and fenced command examples as Ruby or shell backtick execution. The reviewed context shows Markdown formatting and CLI examples, not embedded Ruby execution.
The suspicious tokens appear inside Markdown tables or fenced bash examples. No Ruby code or dynamic interpreter context is present in the reviewed file.
Low
SKILL.md:9-11SKILL.md:23SKILL.md:94-144SKILL.md:175-177
Hardcoded URLs Are Mostly Documentation And Placeholders
Most hardcoded URLs point to project documentation, a preview image, install metadata, or placeholder media inputs. These are expected for a CLI usage guide, except for the separate installer execution concern.
The URLs are visible documentation links or sample input placeholders. I did not find evidence that they are used for covert exfiltration.
Low
SKILL.md:3SKILL.md:59
Weak Cryptography Static Flags Are Not Confirmed
The weak cryptography findings at the cited lines do not correspond to an actual weak algorithm use. The only checksum discussion found is a SHA-256 verification note, which is not a weak cryptographic algorithm in this context.
The cited lines contain descriptive metadata and a table header, not cryptographic code. No evidence found of MD5, SHA-1, or other weak algorithm usage.

Verify and export

JSON report CITATION.cff SARIF 2.1.0 Signed installation manifest

The manifest and lockfile bind install artifacts to cryptographic hashes. This integrity claim is separate from the security assessment.

Audit attestation: not_attestable