demo-recorder

The skill’s recording and dubbing capabilities broadly match its stated purpose, and no credential theft, covert exfiltration, or malicious command execution is shown. However, Cloney is an unverified external CLI required for optional narration, and the skill directs execution outside the agent sandbox; treat this as elevated supply-chain and execution risk pending verification of the CLI and its data handling.

The script renders and manages text-to-speech clips, but the use of eval on CLONEY_ARGS allows arbitrary shell command execution if that environment variable is attacker-controlled. This is a high-severity command-injection risk in that configuration; no other malicious behavior is evident in the provided code.