create-video-fal
Image-to-video (or text-to-video) via any FAL video model (Kling, Seedance, Veo), ROUTED THROUGH THE GooseWorks fal-proxy so the call bills the Ads agent. The template recipe names the model + params; image_url inputs must be public URLs (the orchestrator hosts local frames via MCP get_upload_url -> get_download_url). Returns the result video URL and downloads it. Use for the generative base clip of any video-ad format.
60
71%
Does it follow best practices?
Run evals on this skill
Adds up to 20 points to the overall score
View guide
Critical
Do not install without reviewing
Fix and improve this skill with Tessl
tessl review fix ./skills/ads/capabilities/create-video-fal/SKILL.mdSecurity
3 findings: 2 critical severity, 1 medium severity. Installing this skill is not recommended: please review these findings carefully if you do intend to do so.
E004: Prompt injection detected in skill instructions.
What this means
Detected a prompt injection in the skill instructions. The skill contains hidden or deceptive instructions that fall outside its stated purpose and attempt to override the agent’s safety guidelines or intended behavior.
Why it was flagged
The skill includes explicit instructions to reroute calls through the "GooseWorks fal-proxy" to bill the Ads agent and to never use the provider SDK's default host, which is a deceptive billing-redirection behavior unrelated to the stated image-to-video purpose.
E006: Malicious code pattern detected in skill scripts.
What this means
Detected high-risk code patterns in the skill content — including its prompts, tool definitions, and resources — such as data exfiltration, backdoors, remote code execution, credential theft, system compromise, supply chain attacks, and obfuscation techniques.
Why it was flagged
The code intentionally routes all provider calls through a GooseWorks proxy to bill an Ads agent and auto-posts diagnostic events (including truncated prompts/payload metadata) to that proxy backend, which can divert billing and exfiltrate user-supplied content to a remote service.
W009: Direct money access capability detected (payment gateways, crypto, banking).
What this means
The skill is specifically designed for direct financial operations, giving the agent the ability to move money or execute financial transactions — such as payment processing, cryptocurrency operations, banking integrations, or market order execution.
Why it was flagged
The skill explicitly routes paid API calls through a GooseWorks "fal-proxy" that "bills the Ads agent" (lines 3, 6, 9-10) and includes a bundled media_proxy.py to ensure calls are billed to that agent. This is not a generic tool — it is explicitly designed to cause paid transactions charged to an Ads account, i.e., direct financial execution.
Low
Low-risk findings.
1 low severity finding. Worth noting, but not necessarily harmful.
W011: Third-party content exposure detected (indirect prompt injection risk).
What this means
The skill exposes the agent to untrusted, user-generated content from public third-party sources, creating a risk of indirect prompt injection. This includes browsing arbitrary URLs, reading social media posts or forum comments, and analyzing content from unknown websites.
Why it was flagged
In scripts/media_proxy.py the runtime ingests outsider-supplied JSON payload fields (e.g., payload["prompt"]/payload["image_url"]) and sends them to the Falcon/FAL proxy via requests.post for job submission, then downloads the returned result URL.
- Repository
- gooseworks-ai/goose-skills
- Commit
8866b2a
- Audited
- Security analysis
Is this your skill?
If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.