gemini-unwatermark

Warn

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill's scripts (scripts/clean.sh and scripts/run.mjs) automatically download and install the @pilio/gemini-watermark-remover package from the public npm registry if it is not already present. This occurs on the first run using npm install -g.
  • [COMMAND_EXECUTION]: The skill executes various system commands including find, npm, basename, dirname, and the downloaded gwr CLI tool. It also instructs the user to manually modify their PATH environment variable if the npm global bin directory is not already included.
  • [PRIVILEGE_ESCALATION]: While it does not use sudo directly, the use of npm install -g (global installation) typically requires elevated privileges on many systems and can modify the system-wide environment.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Jun 20, 2026, 05:04 PM
Security Audit — agent-trust-hub — gemini-unwatermark