Skills
Navigate
skills/danielrosehill/claude-video-editor-plugin/deps-setup/Gen Agent Trust Hub

deps-setup

Fail

Audited by Gen Agent Trust Hub on Jun 13, 2026

Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: Uses sudo apt install to install system packages (libimage-exiftool-perl and mediainfo) on the host system.
  • [REMOTE_CODE_EXECUTION]: Fetches and executes the uv installation script from astral.sh via curl | sh. While this is an official distribution method for a well-known tool, it remains a remote code execution pattern.
  • [EXTERNAL_DOWNLOADS]: Downloads and installs software from multiple external ecosystems including GitHub repositories (HKUDS/VideoAgent, LucasHJin/vit, facebookresearch/demucs), PyPI, and the Flathub registry.
  • [COMMAND_EXECUTION]: Performs global installation of the editly package using npm install -g, which modifies the global system environment.
Recommendations
  • HIGH: Downloads and executes remote code from: https://astral.sh/uv/install.sh - DO NOT USE without thorough review
Audit Metadata
Risk Level
HIGH
Analyzed
Jun 13, 2026, 03:34 PM
Security Audit — agent-trust-hub — deps-setup