product-recording
Pass
Audited by Gen Agent Trust Hub on Oct 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using
bunxandnodeto start a local development server and run a repository-local CLI tool (remotion-cli.js). These commands are used to manage the recording studio and perform code transformations. - [DATA_EXFILTRATION]: The skill describes a process for uploading recorded media to
remotion.media. This is a vendor-owned service intended for hosting project assets, and the operation is a core part of the recording offload workflow. - [INDIRECT_PROMPT_INJECTION]: The skill processes metadata (REMOTION_CAPTURE_DATA) from external video files in
~/Downloadsand uses that data to modify source code. This represents an attack surface for indirect prompt injection. - Ingestion points: Video files (MP4/WebM) containing embedded capture metadata, located in the user's
~/Downloadsfolder. - Boundary markers: The skill includes instructions to "Review the generated component, registration, copied public asset, and any dependency changes" before finalizing the process.
- Capability inventory: The agent has the ability to run shell commands and modify source files (
src/Root.tsx) within thepackages/branddirectory. - Sanitization: Not explicitly mentioned in the skill; the integrity of the process depends on the local CLI tool's handling of the metadata.
- [DYNAMIC_EXECUTION]: The skill performs dynamic code modification by using a codemod tool to integrate video captures into the
packages/brandsource code as editable components. This is a functional requirement for the product recording workflow.
Audit Metadata