shot-scraper-video
Pass
Audited by Gen Agent Trust Hub on Jul 6, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to set up and run the video recording process using package managers like
uvxandpipx, as well as thedockerCLI. - [EXTERNAL_DOWNLOADS]: The skill involves downloading the
shot-scraperpackage from PyPI and browser binaries from the official Playwright distribution. It also references the official Microsoft Playwright Docker image frommcr.microsoft.com. - [REMOTE_CODE_EXECUTION]: The skill documentation correctly identifies that the
storyboard.ymlschema includessh:andpython:keys which allow for arbitrary command and code execution; it includes a mandatory security section requiring the agent to manually verify the contents of these files before execution.
Audit Metadata