vhs
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents the installation and usage of the open-source VHS tool from Charm.sh. It includes standard patterns for terminal recording and configuration.
- [EXTERNAL_DOWNLOADS]: Instructions include installing VHS and ffmpeg via standard package managers (scoop, brew), which are well-known and trusted services for software distribution.
- [DATA_EXFILTRATION]: The skill mentions the 'vhs publish' command, which is a legitimate feature of the documented tool used to share recordings via the official vhs.charm.sh service.
- [INDIRECT_PROMPT_INJECTION]: While the skill involves recording terminal output and executing commands defined in tape files, it functions as a documentation and pattern provider. The attack surface for indirect prompt injection is minimal and associated with the intended primary purpose of the skill.
Audit Metadata