media-generation

Warn

Audited by Gen Agent Trust Hub on Sep 21, 2026

Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install and execute the agentcash package from the NPM registry. It specifically references agentcash@latest, which downloads and runs the most recent version of the tool without version pinning or integrity verification.
  • [COMMAND_EXECUTION]: The skill relies on shell command execution for its core operations. This includes global package installation via npm install -g agentcash, which modifies the system environment, as well as the use of npx and curl for interacting with external APIs and Vercel storage services.
Audit Metadata
Risk Level
MEDIUM
Analyzed
Sep 21, 2026, 02:54 AM
Security Audit — agent-trust-hub — media-generation