vhs
Pass
Audited by Gen Agent Trust Hub on Apr 22, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSDATA_EXFILTRATIONCREDENTIALS_UNSAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill is a collection of markdown documentation and templates designed to guide AI agents and users in creating terminal recordings with the VHS tool. No malicious logic or harmful instructions were detected.
- [EXTERNAL_DOWNLOADS]: The skill references installation commands for dependencies such as vhs, ffmpeg, and ttyd from official GitHub repositories and system package managers. It also recommends using the official charmbracelet/vhs-action and other well-known GitHub Actions for CI/CD integration.
- [DATA_EXFILTRATION]: Rule references/cmd-hide-show.md instructs users on how to protect sensitive information during recording using the Hide and Show syntax, which is a defensive security practice aimed at preventing accidental data exposure.
- [CREDENTIALS_UNSAFE]: The skill contains example strings resembling API keys and JWT headers. These are explicitly used within 'Incorrect' code blocks for educational purposes to demonstrate common security pitfalls to the user.
- [COMMAND_EXECUTION]: The documentation provides examples of shell commands and VHS tape syntax for automation purposes. The mentioned build and validation scripts are standard for maintaining structured documentation projects.
Audit Metadata