p-video-animate

• Outcome: Pass
• Latest audit: Sep 3, 2026 · 2:20 PM UTC
• Version: 1.0.11

Overview

This skill is a disclosed Pruna video-animation workflow that uploads user-provided media to Pruna's API for the requested generation task.

Install this only if you are comfortable sending the selected image, video, prompts, and Pruna API key to Pruna's hosted service. Prefer pinned or trusted versions of any related skills you install, and avoid using disable_safety_checker unless you understand the safety and policy impact.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Supply Chain: Unpinned Dependencies, External Script Fetching, Obfuscated Code
• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (24)

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 91% confidence
• Finding: The skill instructs agents to install and run additional tooling via `npx skills add ...` without pinning an exact immutable version. That creates a supply-chain risk: a later package update or compromised dependency could change behavior at install/runtime and execute unreviewed code in the agent environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 91% confidence
• Finding: The skill instructs agents to install and run additional tooling via `npx skills add ...` without pinning an exact immutable version. That creates a supply-chain risk: a later package update or compromised dependency could change behavior at install/runtime and execute unreviewed code in the agent environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 91% confidence
• Finding: The skill instructs agents to install and run additional tooling via `npx skills add ...` without pinning an exact immutable version. That creates a supply-chain risk: a later package update or compromised dependency could change behavior at install/runtime and execute unreviewed code in the agent environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 91% confidence
• Finding: The skill instructs agents to install and run additional tooling via `npx skills add ...` without pinning an exact immutable version. That creates a supply-chain risk: a later package update or compromised dependency could change behavior at install/runtime and execute unreviewed code in the agent environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 91% confidence
• Finding: The skill instructs agents to install and run additional tooling via `npx skills add ...` without pinning an exact immutable version. That creates a supply-chain risk: a later package update or compromised dependency could change behavior at install/runtime and execute unreviewed code in the agent environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 91% confidence
• Finding: The skill instructs agents to install and run additional tooling via `npx skills add ...` without pinning an exact immutable version. That creates a supply-chain risk: a later package update or compromised dependency could change behavior at install/runtime and execute unreviewed code in the agent environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 91% confidence
• Finding: The skill instructs agents to install and run additional tooling via `npx skills add ...` without pinning an exact immutable version. That creates a supply-chain risk: a later package update or compromised dependency could change behavior at install/runtime and execute unreviewed code in the agent environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 91% confidence
• Finding: The skill instructs agents to install and run additional tooling via `npx skills add ...` without pinning an exact immutable version. That creates a supply-chain risk: a later package update or compromised dependency could change behavior at install/runtime and execute unreviewed code in the agent environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 91% confidence
• Finding: The skill instructs agents to install and run additional tooling via `npx skills add ...` without pinning an exact immutable version. That creates a supply-chain risk: a later package update or compromised dependency could change behavior at install/runtime and execute unreviewed code in the agent environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 91% confidence
• Finding: The skill instructs agents to install and run additional tooling via `npx skills add ...` without pinning an exact immutable version. That creates a supply-chain risk: a later package update or compromised dependency could change behavior at install/runtime and execute unreviewed code in the agent environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 91% confidence
• Finding: The skill instructs agents to install and run additional tooling via `npx skills add ...` without pinning an exact immutable version. That creates a supply-chain risk: a later package update or compromised dependency could change behavior at install/runtime and execute unreviewed code in the agent environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 91% confidence
• Finding: The skill instructs agents to install and run additional tooling via `npx skills add ...` without pinning an exact immutable version. That creates a supply-chain risk: a later package update or compromised dependency could change behavior at install/runtime and execute unreviewed code in the agent environment.

Rp1

Medium

• Category: MCP Rug Pull
• Confidence: 91% confidence
• Finding: The skill instructs agents to install and run additional tooling via `npx skills add ...` without pinning an exact immutable version. That creates a supply-chain risk: a later package update or compromised dependency could change behavior at install/runtime and execute unreviewed code in the agent environment.

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: The skill includes examples that upload user video/image content and send an API key to an external service, but it does not provide an explicit privacy, consent, retention, or data-handling warning. In a media-processing skill, users may not realize their assets and credentials are being transmitted off-platform, increasing risk of unauthorized sharing or policy noncompliance.

External Transmission

Medium

• Category: Data Exfiltration

Content

### Upload source assets

```bash
curl -X POST "https://api.pruna.ai/v1/files" \
  -H "apikey: ${PRUNA_API_KEY}" \
  -F "content=@/path/to/source-video.mp4"

• Confidence: 60% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

### Upload source assets

```bash
curl -X POST "https://api.pruna.ai/v1/files" \
  -H "apikey: ${PRUNA_API_KEY}" \
  -F "content=@/path/to/source-video.mp4"

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

### Upload source assets

```bash
curl -X POST "https://api.pruna.ai/v1/files" \
  -H "apikey: ${PRUNA_API_KEY}" \
  -F "content=@/path/to/source-video.mp4"

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

### Upload source assets

```bash
curl -X POST "https://api.pruna.ai/v1/files" \
  -H "apikey: ${PRUNA_API_KEY}" \
  -F "content=@/path/to/source-video.mp4"

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

### Upload source assets

```bash
curl -X POST "https://api.pruna.ai/v1/files" \
  -H "apikey: ${PRUNA_API_KEY}" \
  -F "content=@/path/to/source-video.mp4"

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

### Upload source assets

```bash
curl -X POST "https://api.pruna.ai/v1/files" \
  -H "apikey: ${PRUNA_API_KEY}" \
  -F "content=@/path/to/source-video.mp4"

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

### Upload source assets

```bash
curl -X POST "https://api.pruna.ai/v1/files" \
  -H "apikey: ${PRUNA_API_KEY}" \
  -F "content=@/path/to/source-video.mp4"

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

### Upload source assets

```bash
curl -X POST "https://api.pruna.ai/v1/files" \
  -H "apikey: ${PRUNA_API_KEY}" \
  -F "content=@/path/to/source-video.mp4"

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

External Transmission

Medium

• Category: Data Exfiltration

Content

### Upload source assets

```bash
curl -X POST "https://api.pruna.ai/v1/files" \
  -H "apikey: ${PRUNA_API_KEY}" \
  -F "content=@/path/to/source-video.mp4"

• Confidence: 50% confidence
• Finding: Data is being sent to an external URL. This could be legitimate telemetry or data exfiltration. Manual review is recommended.

Vague Triggers

Low

• Confidence: 82% confidence
• Finding: The manifest description says to use the skill when someone wants 'a photo to move like another video' and includes broad examples like 'performance variations from a template clip.' While the skill boundary later narrows scope, this top-level trigger text lacks explicit exclusions or negative examples and could overlap with adjacent photo/video editing requests.

VirusTotal

64/64 vendors flagged this skill as clean.

Static analysis

No suspicious patterns detected.