browser-video-recording
Pass
Audited by Gen Agent Trust Hub on Jul 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill's primary function is to perform local video rendering from screenshots provided by the user. It does not engage in network activity or handle sensitive user credentials.
- [COMMAND_EXECUTION]: The script
scripts/render_browser_demo.pyinvokes external utilities includingffmpeg,ffprobe,swift, andscreencapture. These calls are implemented using list-based arguments (e.g.,subprocess.run(["swift", ...])), which correctly mitigates command injection risks by avoiding shell interpretation. - [REMOTE_CODE_EXECUTION]: The script executes an internal, hardcoded Swift code snippet via the
swiftinterpreter to handle macOS-specific cursor matte extraction. This is a self-contained, functional component of the skill and does not download or execute untrusted code from remote sources. - [DATA_EXPOSURE]: No patterns for data exfiltration or unauthorized file access were identified. The script operates within temporary directories and user-specified output paths for its rendering tasks.
Audit Metadata