screenstudio-alt
Pass
Audited by Gen Agent Trust Hub on Jul 20, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
subprocessmodule to execute system commands includingffmpeg,ffprobe,swiftc, andscreencapture. While the scripts pass arguments as lists (avoiding shell interpolation), they perform a wide range of system operations that involve substantial interaction with the local environment. - [DATA_EXFILTRATION]: The file
src/events-log.swiftis a utility designed to log user input (mouse movements, clicks, and keystrokes) on macOS. While intended for generating video overlays and including a check for secure input fields, it functionally acts as a local input logger that records user activity to JSONL files. - [COMMAND_EXECUTION]: The scripts
src/studio.pyandsrc/sequence.pyinitiate local web servers usinghttp.serveron the loopback interface (127.0.0.1) to provide a video editing GUI. These servers provide endpoints to read files from the disk and upload content, though they include directory traversal protections. - [DYNAMIC_EXECUTION]: The script
src/render.pyutilizesimportlib.utilto dynamically loadsrc/polish.pyfrom a local path at runtime.
Audit Metadata