skills/ingpoc/skills/screenshot/Gen Agent Trust Hub

screenshot

Pass

Audited by Gen Agent Trust Hub on Jun 15, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes system-level utilities to capture screenshots across macOS, Linux, and Windows.
  • It uses subprocess.run to call screencapture, osascript, and swift on macOS, and scrot, gnome-screenshot, or import on Linux.
  • On Windows, it leverages PowerShell scripts to access the System.Drawing and System.Windows.Forms .NET namespaces for image capture.
  • The implementation uses argument lists rather than shell strings, significantly reducing the risk of command injection.
  • [DATA_EXFILTRATION]: While the skill captures sensitive screen data (data exposure), the analysis confirms that the content is only saved to local paths specified by the user or the system's temporary directory. No network-related functions or data exfiltration patterns were found.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 15, 2026, 09:45 AM
Security Audit — agent-trust-hub — screenshot