techsmith-local-dev-loop
Pass
Audited by Gen Agent Trust Hub on Sep 10, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references and fetches resources from official TechSmith domains (techsmith.com) and their GitHub organization (github.com/TechSmith). These are recognized vendor resources used for providing authoritative documentation and samples.
- [INDIRECT_PROMPT_INJECTION]: The skill processes content from external documentation and local repository files to guide its code modification tasks, creating an indirect injection surface.
- Ingestion points: External TechSmith documentation via
WebFetchand local repository scripts viaRead,Glob, andGrep. - Boundary markers: The instructions explicitly define approval boundaries, such as prohibiting continuous desktop polling or committing captures as fixtures.
- Capability inventory: The skill uses
WriteandEdittools to modify files within the repository based on the analyzed data. - Sanitization: The skill mandates the redaction of all keys, account identifiers, and activation artifacts before processing or outputting data.
Audit Metadata