session-replay
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions for the user to install the
vhstool from Charmbracelet's official GitHub repository (github.com/charmbracelet/vhs) usinggo installif the tool is not already present on the system. - [DYNAMIC_EXECUTION]: The skill dynamically generates a
.tapescript file at runtime (e.g.,{tempdir}/session-replay-{timestamp}.tape) by converting conversation turns into UI automation commands for the VHS tool. This generated script is then passed to thescry:vhs-recordingskill for execution. - [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from session history files which may contain arbitrary text or terminal sequences that could influence the agent's context or the generated GIF script.
- Ingestion points: Reads
.jsonlsession files from~/.claude/projects/viascribe.session_parser.parse_session(). - Boundary markers: None identified in the parsing instructions to delimit potentially malicious content within the session logs.
- Capability inventory: The skill has the capability to write files to the temporary directory and invoke the
scry:vhs-recordingskill to process the generated content. - Sanitization: The skill documentation acknowledges potential "string escaping bugs" in the
Error Handlingsection, indicating that content is processed and escaped during the tape generation phase, though the specific sanitization logic is handled by the internalscribe.tape_generatormodule.
Audit Metadata