Security audit
Security checks for vulnerabilities and agentic risk
The skill coherently supports CellCog video creation, with expected cloud processing, credit costs, and dependency installation risks.
Prompts and supplied scripts are sent to CellCog, so share only material you are authorized to disclose. Expect credit charges without guaranteed usable results. Review the separate CellCog dependency and prefer reviewed, pinned versions before installation; its implementation was not bundled here.
The usage instructions call CellCog's create_chat with the user's task prompt, transmitting its contents to a third-party service. Although the skill identifies CellCog as its provider and warns about costs and output quality, it does not warn that supplied scripts, business information, or other prompt content will leave the user's environment.
The documented npx skills add cellcog/skills --skill cellcog command can download and execute an unpinned version of the skills package. A compromised future release could execute code with the invoking user's permissions, potentially exposing local files or credentials. This is a conditional supply-chain risk in an optional setup path, not evidence of malicious behavior or an MCP server configuration as the static finding suggests.
