oil-motion
Warn
Audited by Gen Agent Trust Hub on Oct 23, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of content from an external community GitHub repository (
github.com/oil-oil/oil-motion) using thenpx skills addcommand. - [REMOTE_CODE_EXECUTION]: The skill instructions specify that the agent will run
pip install -r scripts/requirements.txtfrom the downloaded repository at runtime. This pattern involves executing dependency manifests from an untrusted community source. - [COMMAND_EXECUTION]: The installation process and the detection logic in the 'Decision tree' involve executing shell scripts to check for the existence of files and install software via
npxandpip. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted external data in the form of AI-generated or existing video and image sequences.
- Ingestion points: User-provided image and video sequences processed for animation (SKILL.md).
- Boundary markers: None specified for delimiting instructions within media metadata or associated prompts.
- Capability inventory: The skill executes shell commands (
pip,ffmpeg), performs network operations (ZenMux API), and writes animation assets to the local file system. - Sanitization: No evidence of sanitization or validation of the input media content or metadata before processing.
Audit Metadata