feature-doc
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill's supporting scripts (
recompose.py,videokit.py,screenrec.py, andarcade-record.py) use thesubprocessmodule to execute external binaries. - These scripts call
ffmpegfor video encoding, processing, and rendering walkthroughs. - The
arcade-record.pyandscreenrec.pyscripts interact with a localbrowser-harnessCLI to perform browser automation via the Chrome DevTools Protocol (CDP). - These executions are strictly aligned with the skill's primary purpose of capturing and processing media for documentation.
- [INDIRECT_PROMPT_INJECTION]: The skill incorporates an attack surface by reading external, untrusted content from GitHub issues to generate documentation.
- Ingestion points: Untrusted data enters the agent context through
gh issue viewcommands executed in the enrichment phase (defined inSKILL.md). - Boundary markers: The instructions do not specify explicit boundary markers or delimiters when interpolating issue content into the documentation draft.
- Capability inventory: The skill possesses capabilities for file system writes, network access via the
ghCLI, and browser automation. - Sanitization: The skill mitigates risks through a 'closed-loop' architecture where a separate, read-only verifier agent checks the generated article against the original acceptance criteria (AC) before any PR is opened.
Audit Metadata