screencast
Pass
Audited by Gen Agent Trust Hub on Aug 11, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external binaries such as
ffmpeg,ffprobe, andagent-browserto record and render video content. It also runsnpmto install necessary Node.js dependencies in the skill's directory. - [EXTERNAL_DOWNLOADS]: The skill downloads the
@napi-rs/canvaspackage from the NPM registry during its initial rendering task if the dependency is not already present. This is a documented self-installation step. - [SAFE]: Security best practices are followed for data handling, including the automatic redaction of password input fields and the inclusion of a
--privateflag to prevent sensitive strings from appearing in event logs or video overlays. Furthermore, it explicitly sets restrictive filesystem permissions (0o700for directories and0o600for files) to protect session data from unauthorized local access.
Audit Metadata