shot-scraper-video

Pass

Audited by Gen Agent Trust Hub on Jul 6, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands to set up and run the video recording process using package managers like uvx and pipx, as well as the docker CLI.
  • [EXTERNAL_DOWNLOADS]: The skill involves downloading the shot-scraper package from PyPI and browser binaries from the official Playwright distribution. It also references the official Microsoft Playwright Docker image from mcr.microsoft.com.
  • [REMOTE_CODE_EXECUTION]: The skill documentation correctly identifies that the storyboard.yml schema includes sh: and python: keys which allow for arbitrary command and code execution; it includes a mandatory security section requiring the agent to manually verify the contents of these files before execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 6, 2026, 09:33 AM
Security Audit — agent-trust-hub — shot-scraper-video