media-generation
Warn
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the agent to install and execute the
agentcashpackage from the NPM registry. It specifically referencesagentcash@latest, which downloads and runs the most recent version of the tool without version pinning or integrity verification. - [COMMAND_EXECUTION]: The skill relies on shell command execution for its core operations. This includes global package installation via
npm install -g agentcash, which modifies the system environment, as well as the use ofnpxandcurlfor interacting with external APIs and Vercel storage services.
Audit Metadata