demo-video
Pass
Audited by Gen Agent Trust Hub on Aug 9, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/record_template.pyutilizessubprocess.Popenandsubprocess.runto manageffmpeg,ffprobe,Xvfb, andgoogle-chrome. These interactions are used to establish a virtual display and record the screen at high resolution. The use of list-based arguments for these commands effectively prevents shell injection vulnerabilities. - [EXTERNAL_DOWNLOADS]: The documentation specifies requirements for the
websocketsPython package and thexvfbsystem package. These are standard, reputable dependencies necessary for the skill's core functionality of browser driving and video capture. - [SAFE]: The skill implements best practices for handling sensitive information by explicitly instructing the user to keep credentials out of the repository and using separate browser profiles with password management disabled.
Audit Metadata