Video Editing Ai App Free

• Outcome: Review
• Latest audit: May 28, 2026, 6:40 AM
• Version:
  1.0.0

Overview

This video-editing skill appears purpose-aligned, but it can automatically start a remote editing session and broadly forward unmatched user messages to the provider backend.

Install only if you are comfortable sending selected videos and editing instructions to the provider's cloud backend. Use explicit commands, avoid sensitive recordings, and confirm before any upload or ambiguous follow-up message is forwarded.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code

Findings (2)

Vague Triggers

Medium

• Confidence: 87% confidence
• Finding: The suggested trigger phrases are broad and conversational, especially the fragment "trim the pauses, add transitions, and", which could overlap with normal user speech and unintentionally invoke or steer the skill. Because this skill performs external API setup and session creation automatically on first interaction, accidental activation can cause unintended network actions and token/session issuance.

Vague Triggers

Medium

• Confidence: 92% confidence
• Finding: The routing table sends "Everything else" to the SSE action, creating an extremely broad fallback that can treat arbitrary conversation as an editing command. In this skill, the fallback is more dangerous because SSE sends user text to a remote backend tied to an authenticated session, so benign or unrelated prompts may trigger unintended remote processing or disclosure of user-provided content.

VirusTotal

VirusTotal findings are pending for this skill version.