skills/paldom/terminaltor/cast-render/Gen Agent Trust Hub

cast-render

Pass

Audited by Gen Agent Trust Hub on Sep 7, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides specific command-line instructions for the agent to execute agg, ffmpeg, ffprobe, and gifsicle within the terminal environment to perform media conversion and optimization.
  • [EXTERNAL_DOWNLOADS]: The skill references and directs the agent to documentation and repositories from trusted or well-known services, including GitHub (github.com/asciinema/agg), the official ffmpeg.org site, and lcdf.org for gifsicle. These references do not escalate the security verdict.
  • [INDIRECT_PROMPT_INJECTION]: The skill is designed to process external .cast files which represent untrusted input; however, the skill explicitly recommends using cast-redact to scan for secrets before rendering, which demonstrates a security-conscious design. The risk remains low as the output is typically visual media.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 7, 2026, 09:53 PM