charmed-vhs
Pass
Audited by Gen Agent Trust Hub on Oct 12, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill documents the use of '.tape' files to automate terminal sessions. This presents a vulnerability surface if the agent generates these scripts based on untrusted user instructions.
- Ingestion points: The agent is instructed to write '.tape' scripts, which are text-based command sequences that could be influenced by user-provided parameters or requests in a chat session.
- Boundary markers: There are no instructions provided to the agent for sanitizing user input or using delimiters to separate user data from the executable commands in the generated scripts.
- Capability inventory: The skill enables full terminal interaction, including executing shell commands, building code (e.g., 'go build'), and potentially publishing output to external servers ('vhs publish').
- Sanitization: No sanitization or validation steps are defined for handling external content before it is incorporated into the terminal automation scripts.
Audit Metadata