daytona-recording-artifacts

Pass

Audited by Gen Agent Trust Hub on Aug 14, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill uses daytona exec to run several shell commands in the sandbox environment, including creating directories, starting a background Python HTTP server (python3 -m http.server), and executing local project scripts from the .devcontainer directory (e.g., test-on-daytona.sh, capture-daytona-screenshot.sh).
  • [DATA_EXPOSURE]: It exposes the /workspace/proof-frames or /daytona-artifacts directories to the public internet using daytona preview-url on port 8090. This is documented as the method for sharing 'frame proof' and recordings with reviewers. The exposure is limited to the specified artifact directories and occurs only when the agent initiates the server.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 14, 2026, 03:33 AM