moneyprinterturbo-video
Fail
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: HIGHREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [REMOTE_CODE_EXECUTION]: Fetches and executes installation scripts for the 'uv' package manager from Astral's official domain (
astral.sh). It also downloads the project source code as a ZIP archive from the author's repository on GitHub. - [COMMAND_EXECUTION]: Uses the
subprocessmodule to invoke theuvpackage manager and Python-based CLI tools to synchronize dependencies and execute video generation tasks. These operations are essential for the skill's primary function. - [INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied video subjects and scripts, which are passed as arguments to internal CLI tools.
- Ingestion points: User input enters via the
--subjectargument and optional CLI flags inmpt_agent.py. - Boundary markers: Basic whitespace stripping is performed, but no explicit delimiters are used to separate user-provided content from command logic.
- Capability inventory: The skill possesses the ability to execute shell commands, perform network requests, and write files.
- Sanitization: Input is stripped of leading/trailing whitespace before being used in task manifests and command arguments.
Recommendations
- HIGH: Downloads and executes remote code from: https://astral.sh/uv/install.sh - DO NOT USE without thorough review
Audit Metadata