video-motion-previs

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.70). The GitHub repository and its raw installer / releases API are used by the CLI to download and execute installers (including a fetched install.sh and Windows release assets) — while hosted on GitHub, fetching and running scripts or release executables from an individual/unvetted account is a high-risk distribution pattern.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). In scripts/video-motion-previs.mjs the workflow command accepts an arbitrary http(s) URL as user input and forwards it to the Motion Previs control server via rpc('import_url', { url: input }), causing the app to ingest outsider-authored free text/content indirectly contained in that URL.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The install flow fetches and executes remote code at runtime: it clones the repository https://github.com/wassermanproductions/motion-previs-studio (then runs npm ci) and downloads+executes the script at https://raw.githubusercontent.com/wassermanproductions/motion-previs-studio/main/install.sh.