vhs-terminal-recorder
Pass
Audited by Gen Agent Trust Hub on Jun 24, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill facilitates the execution of terminal commands through the vhs CLI tool to record sessions. The instructions explicitly warn that rendering a tape executes its commands, which may involve file system changes or network access.
- [EXTERNAL_DOWNLOADS]: The README and SKILL.md files provide instructions for installing vhs, ffmpeg, and ttyd via Homebrew, which is a well-known and trusted package management service.
- [DATA_EXFILTRATION]: The skill includes documentation for the vhs publish command, which uploads content to the public vhs.charm.sh service. The author provides clear safety guidelines to prevent accidental secret disclosure and requires explicit user consent before any public upload.
- [PROMPT_INJECTION]: The skill has an indirect prompt injection surface through the processing of .tape files which contain terminal instructions.
- Ingestion points: .tape files referenced in SKILL.md.
- Boundary markers: The skill instructs the agent to read untrusted tapes before running them.
- Capability inventory: Subprocess calls through the vhs CLI allowing terminal access.
- Sanitization: Relies on manual inspection and explicit warnings against recording sensitive data like tokens or private paths.
Audit Metadata