The Agent Skills Directory

[COMMAND_EXECUTION]: The skill initiates a Node.js process to act as a bridge server between the Chrome extension and the CLI. It also executes the FFmpeg binary via the ffmpeg-static package to perform video encoding of captured frames.
[EXTERNAL_DOWNLOADS]: The skill installs necessary dependencies from the official NPM registry, including ws for WebSocket communication and ffmpeg-static. The latter automatically downloads the appropriate FFmpeg binary for the host operating system during the installation phase.
[DATA_EXFILTRATION]: Although the skill records visual content from browser tabs, the captured frame data is transmitted over a local WebSocket connection (localhost:9234) and stored on the local filesystem. There is no evidence of the data being sent to external or unauthorized servers.
[INDIRECT_PROMPT_INJECTION]: The tool ingests external data such as tab titles and URLs via the Chrome Extension API. However, this data is used strictly for metadata display and tab identification. The skill employs safe handling practices, such as JSON.stringify for captions, preventing the data from being interpreted as executable commands or prompt instructions.

record-screen