camsnap-hardened
Pass
Audited by Gen Agent Trust Hub on Apr 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
camsnapbinary using Homebrew from a third-party tap (steipete/tap/camsnap). - [COMMAND_EXECUTION]: The skill utilizes the
camsnapCLI for camera discovery, snapshots, and recording. Thewatchcommand includes an--actionparameter that allows for the execution of a local shell command when motion is detected. - [SAFE]: The skill incorporates explicit safety guardrails that instruct the agent to never pipe camera output to network commands, redact credentials from responses, and restrict credential storage to the local configuration file (
~/.config/camsnap/config.yaml). These measures significantly mitigate the risk of data exfiltration and credential exposure.
Audit Metadata