install-mcp-genmedia
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides a command to download an installation script from
raw.githubusercontent.com/GoogleCloudPlatform/genmedia-creative-studio/. This is an official resource from Google Cloud Platform. - [REMOTE_CODE_EXECUTION]: The skill instructs the user to pipe a remote script directly to bash (
curl ... | bash). While this pattern generally carries risk, the source is an official Google repository, and the action is consistent with the skill's stated purpose of installing developer tools. - [COMMAND_EXECUTION]: The skill involves executing shell commands to install binaries into
~/.local/bin/and registering plugins with theantigravityCLI. These are standard deployment steps for this ecosystem. - [SAFE]: All external references, including the installation script and the binary targets, belong to the author's official organization (Google Cloud Platform). No obfuscation, persistence, or data exfiltration behaviors were detected.
Audit Metadata