gsap-interactions
Fail
Audited by Gen Agent Trust Hub on Jun 16, 2026
Risk Level: HIGHCOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill directs the agent to execute shell commands to detect the environment and verify the installation status of various tools.
- [COMMAND_EXECUTION]: The instructions mandate the use of
sudo(e.g.,sudo apt-get install -y ffmpeg) to acquire root-level privileges for installing system utilities, which is a high-risk operation. - [EXTERNAL_DOWNLOADS]: The skill automates the installation of Node.js dependencies, specifically
gsapand@gsap/react, via the npm registry. - [EXTERNAL_DOWNLOADS]: The skill triggers the download and installation of the FFmpeg utility through various system package managers including Homebrew, WinGet, Chocolatey, APT, and DNF.
Recommendations
- AI detected serious security threats
Audit Metadata