cast-render
Pass
Audited by Gen Agent Trust Hub on Sep 7, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides specific command-line instructions for the agent to execute
agg,ffmpeg,ffprobe, andgifsiclewithin the terminal environment to perform media conversion and optimization. - [EXTERNAL_DOWNLOADS]: The skill references and directs the agent to documentation and repositories from trusted or well-known services, including GitHub (
github.com/asciinema/agg), the officialffmpeg.orgsite, andlcdf.orgforgifsicle. These references do not escalate the security verdict. - [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external
.castfiles which represent untrusted input; however, the skill explicitly recommends usingcast-redactto scan for secrets before rendering, which demonstrates a security-conscious design. The risk remains low as the output is typically visual media.
Audit Metadata