screen-recording

Pass

Audited by Gen Agent Trust Hub on Jun 12, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: Downloads the Chromium browser binary using the playwright install command. This is a standard requirement for the Playwright library to enable browser automation and frame capture.\n- [COMMAND_EXECUTION]: Uses the mss library to perform screen capture operations from the desktop or specified regions in SKILL.md.\n- [COMMAND_EXECUTION]: Utilizes ctypes to interface with the Windows user32.dll library to call GetWindowRect, which is used specifically to obtain application window coordinates for targeted screen recording in SKILL.md.\n- [INDIRECT_PROMPT_INJECTION]: The skill provides the capability to navigate to and interact with external URLs, creating an ingestion surface for untrusted data.\n
  • Ingestion points: The url parameter in the record_frames function within SKILL.md.\n
  • Boundary markers: No explicit boundary markers or isolation instructions are provided for processed web content.\n
  • Capability inventory: Full browser control via playwright, desktop screen capture via mss, and low-level system API calls via ctypes in SKILL.md.\n
  • Sanitization: The skill does not implement validation or sanitization for input URLs or the data retrieved from external web pages before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 12, 2026, 11:37 PM
Security Audit — agent-trust-hub — screen-recording