skills/ooiyeefei/ccc/demo-video/Gen Agent Trust Hub

demo-video

Pass

Audited by Gen Agent Trust Hub on Aug 9, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The script scripts/record_template.py utilizes subprocess.Popen and subprocess.run to manage ffmpeg, ffprobe, Xvfb, and google-chrome. These interactions are used to establish a virtual display and record the screen at high resolution. The use of list-based arguments for these commands effectively prevents shell injection vulnerabilities.
  • [EXTERNAL_DOWNLOADS]: The documentation specifies requirements for the websockets Python package and the xvfb system package. These are standard, reputable dependencies necessary for the skill's core functionality of browser driving and video capture.
  • [SAFE]: The skill implements best practices for handling sensitive information by explicitly instructing the user to keep credentials out of the repository and using separate browser profiles with password management disabled.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 9, 2026, 11:45 AM
Security Audit — agent-trust-hub — demo-video