record-tui
Pass
Audited by Gen Agent Trust Hub on Sep 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs users to install required binaries (
vhs,ffmpeg,ttyd) from well-known repositories using standard package managers including Homebrew, APT, and Snap. It also references the installation of VHS via the Go toolchain from a trusted GitHub organization. - [COMMAND_EXECUTION]: The skill is designed to execute terminal commands through the VHS recording tool. This includes support for keyboard emulation, environment variable configuration, and shell script execution within the context of generating animated demos.
- [INDIRECT_PROMPT_INJECTION]: The skill exhibits a vulnerability surface where terminal recording instructions (tape files) are generated based on user prompts or existing project content.
- Ingestion points: User instructions for demo creation and existing project files (such as source code or configuration) read by the agent to draft recordings.
- Boundary markers: No specific delimiters or "ignore embedded instructions" warnings are included in the provided tape templates to prevent the recording of malicious command sequences.
- Capability inventory: Full terminal execution capabilities via the
vhsbinary andttydterminal-to-web backend. - Sanitization: The skill provides no mechanisms for validating or sanitizing the content of shell commands before they are processed by the recording tool.
Audit Metadata