session-replay

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill provides instructions for the user to install the vhs tool from Charmbracelet's official GitHub repository (github.com/charmbracelet/vhs) using go install if the tool is not already present on the system.
  • [DYNAMIC_EXECUTION]: The skill dynamically generates a .tape script file at runtime (e.g., {tempdir}/session-replay-{timestamp}.tape) by converting conversation turns into UI automation commands for the VHS tool. This generated script is then passed to the scry:vhs-recording skill for execution.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests untrusted data from session history files which may contain arbitrary text or terminal sequences that could influence the agent's context or the generated GIF script.
  • Ingestion points: Reads .jsonl session files from ~/.claude/projects/ via scribe.session_parser.parse_session().
  • Boundary markers: None identified in the parsing instructions to delimit potentially malicious content within the session logs.
  • Capability inventory: The skill has the capability to write files to the temporary directory and invoke the scry:vhs-recording skill to process the generated content.
  • Sanitization: The skill documentation acknowledges potential "string escaping bugs" in the Error Handling section, indicating that content is processed and escaped during the tape generation phase, though the specific sanitization logic is handled by the internal scribe.tape_generator module.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 10:05 AM