screenstudio-alt

Pass

Audited by Gen Agent Trust Hub on Jul 20, 2026

Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill makes extensive use of the subprocess module to execute system commands including ffmpeg, ffprobe, swiftc, and screencapture. While the scripts pass arguments as lists (avoiding shell interpolation), they perform a wide range of system operations that involve substantial interaction with the local environment.
  • [DATA_EXFILTRATION]: The file src/events-log.swift is a utility designed to log user input (mouse movements, clicks, and keystrokes) on macOS. While intended for generating video overlays and including a check for secure input fields, it functionally acts as a local input logger that records user activity to JSONL files.
  • [COMMAND_EXECUTION]: The scripts src/studio.py and src/sequence.py initiate local web servers using http.server on the loopback interface (127.0.0.1) to provide a video editing GUI. These servers provide endpoints to read files from the disk and upload content, though they include directory traversal protections.
  • [DYNAMIC_EXECUTION]: The script src/render.py utilizes importlib.util to dynamically load src/polish.py from a local path at runtime.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 20, 2026, 10:14 AM
Security Audit — agent-trust-hub — screenstudio-alt