cast-record
Pass
Audited by Gen Agent Trust Hub on Jul 21, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill utilizes the
asciinemaCLI to capture terminal output. This is the core functionality and is used to record either interactive sessions or specific command strings. - [DATA_EXFILTRATION]: The instructions include extensive security best practices to prevent sensitive data from being captured in recordings, such as using temporary home directories (
mktemp -d) and stripped environments (env -i) to hide host details, SSH keys, or cloud credentials. - [REMOTE_CODE_EXECUTION]: The skill provides instructions for recording the execution of local scripts (e.g., via the
-cflag). It explicitly advises users to review these scripts before recording, treating them as executable code to avoid unintended actions. - [SAFE]: The skill was evaluated for indirect prompt injection risks associated with processing terminal output: 1. Ingestion points: terminal session content captured in
.castfiles (SKILL.md); 2. Boundary markers: specific recommendations for isolated environments and generic prompts; 3. Capability inventory:asciinemarecording and playback; 4. Sanitization: warnings to perform secret scans (cast-redact) before publishing recordings.
Audit Metadata