browser-video-recording
Pass
Audited by Gen Agent Trust Hub on Oct 14, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The
scripts/render_browser_demo.pyutility invokes external binaries includingffmpeg,ffprobe,swift, and/usr/sbin/screencaptureusing Python'ssubprocessmodule. These calls are used to process images, capture system UI elements, and encode the final video stream. - [DYNAMIC_EXECUTION]: The Python script contains a hardcoded Swift source string (
SWIFT_CURSOR_CAPTURE) which it executes at runtime by piping the code into theswiftinterpreter. This technique is used to perform specialized macOS UI operations like creating transparent cursor mattes. - [INDIRECT_PROMPT_INJECTION]: The skill processes a JSON configuration file to determine rendering parameters. This config defines file system paths for screenshots and the final output, as well as arguments for
ffmpeg(e.g.,preset,crf). If the agent populates this configuration from untrusted user data without validation, it could lead to path traversal or unintended file writes.
Audit Metadata