screen-recorder
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses
osascript(JXA) to bridge to Apple'sCoreGraphicsandAppKitAPIs for window management and frontmost application identification inscripts/frontmost_app.jsandscripts/window_list.js. - [COMMAND_EXECUTION]: The main script
scripts/record.shinvokes the native macOS/usr/sbin/screencaptureutility to perform the actual recording. This is a legitimate use of built-in system tools for the skill's stated purpose. - [COMMAND_EXECUTION]: The skill uses small inline Python snippets to parse JSON output from the JXA scripts. These are limited to data processing and do not involve remote code execution or unsafe input handling.
- [SAFE]: File system operations are restricted to the user's home directory (
~/Movies/ScreenRecordingsand~/.local/state/moinsen-screen-recorder) for session tracking and saving output files. No sensitive system directories are modified.
Audit Metadata