screenstudio-alt

Pass

Audited by Gen Agent Trust Hub on Oct 27, 2026

Risk Level: SAFEPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [PRIVILEGE_ESCALATION]: The documentation specifies that the events-log component requires macOS Accessibility and Input Monitoring permissions to capture cursor movements and keystroke data during recording. These are high-level system permissions that allow the application to monitor user input, which is sensitive information.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes external video files and JSON-formatted event logs as part of its post-production workflow, creating an attack surface for data-driven injection.
  • Ingestion points: Processes in.mp4 and in.events.jsonl files via the polish.py script.
  • Boundary markers: No explicit delimiters or boundary markers are documented for the data processing phase.
  • Capability inventory: The skill executes Python and FFmpeg commands to render and manipulate video data based on the input logs.
  • Sanitization: There is no mention of sanitizing or validating the contents of the event logs or video metadata before processing.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 27, 2026, 05:28 AM