webtoon-vault-manga-downloader
Fail
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: HIGHEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructions direct users to download a ZIP archive from an unverified GitHub Pages site (
bunatechnologybackup.github.io/manga-pull-cli/). - [REMOTE_CODE_EXECUTION]: The installation process involves unzipping a remote archive and running
pip install, which could lead to the execution of malicious code from an untrusted source. - [EXTERNAL_DOWNLOADS]: The skill references an unverified GitHub repository (
BunaTechnologyBackUP/manga-pull-cli.git) for source code installation. - [COMMAND_EXECUTION]: The documentation encourages running CLI commands (
webtoon-vault) from a package that originates from an unverified source, inheriting the risks associated with the untrusted code.
Recommendations
- AI detected serious security threats
Audit Metadata