Security audit

Renderingvideo Generator

Security checks for vulnerabilities and agentic risk

Overview

This skill openly sends RenderingVideo schema JSON to a public preview service to create temporary shareable video previews, which matches its stated purpose.

Install only if you are comfortable sending the selected RenderingVideo JSON schema to RenderingVideo's public preview service and receiving a temporary shareable link. Do not use it with secrets, private internal URLs, proprietary unreleased content, or personal data unless that exposure is acceptable.

A.I.G

Vulnerability Patterns

Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review
Embedded Malicious CodeShips malicious scripts inside the skill and executes them locally
Unauthorized Access and Privilege EscalationObtains permissions beyond the task's legitimate needs

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (3)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 93% confidence
Finding: The README instructs agents and users to send arbitrary RenderingVideo schema JSON to a public preview endpoint and emphasizes that the resulting link is shareable, but it does not warn that submitted content may contain sensitive text, URLs, or embedded data that becomes exposed through a publicly accessible preview. In an agent context, this increases the chance that private user data or proprietary media configuration is uploaded to an unauthenticated third-party service without informed consent.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The skill explicitly instructs the agent to send user-provided schema content to an external public preview service and notes that the resulting preview page is shareable and temporary, but the description does not prominently warn users about this data transfer and exposure. This creates a real confidentiality and privacy risk because users may provide proprietary templates, internal content, or sensitive metadata without realizing it will be uploaded to a third-party service and exposed via a shareable link.
Content: No source excerpt is available for this finding.

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 95% confidence
Finding: The script reads a local JSON file and POSTs its full contents to an external service without any explicit warning, confirmation, or data-classification check. In an agent skill context, this can cause unintentional exfiltration of sensitive prompts, tokens, internal URLs, or proprietary schema content if the operator assumes the tool only performs local validation.
Content: No source excerpt is available for this finding.