camsnap
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill initiates the installation of the
camsnaputility via a third-party Homebrew tap (steipete/tap/camsnap) which is outside of official package registries. - [COMMAND_EXECUTION]: The
watchcommand includes an--actionparameter designed to execute arbitrary shell commands when motion is detected, creating a surface for command injection if inputs are not properly sanitized. - [DATA_EXFILTRATION]: The skill manages sensitive camera credentials (username and password) by passing them as plaintext command-line arguments and storing them in a local configuration file (
~/.config/camsnap/config.yaml), which could lead to exposure in process lists or shell history logs. - [INDIRECT_PROMPT_INJECTION]: The skill has a high ingestion surface as it processes external camera data and metadata which can trigger the
--actioncommand execution pathway, potentially allowing an attacker to influence local shell execution via crafted camera responses or motion events.
Audit Metadata