screenstudio-alt
Pass
Audited by Gen Agent Trust Hub on Oct 27, 2026
Risk Level: SAFEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The documentation specifies that the
events-logcomponent requires macOS Accessibility and Input Monitoring permissions to capture cursor movements and keystroke data during recording. These are high-level system permissions that allow the application to monitor user input, which is sensitive information. - [INDIRECT_PROMPT_INJECTION]: The skill processes external video files and JSON-formatted event logs as part of its post-production workflow, creating an attack surface for data-driven injection.
- Ingestion points: Processes
in.mp4andin.events.jsonlfiles via thepolish.pyscript. - Boundary markers: No explicit delimiters or boundary markers are documented for the data processing phase.
- Capability inventory: The skill executes Python and FFmpeg commands to render and manipulate video data based on the input logs.
- Sanitization: There is no mention of sanitizing or validating the contents of the event logs or video metadata before processing.
Audit Metadata