asciinema-converter
Pass
Audited by Gen Agent Trust Hub on Apr 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized access attempts were detected across the skill files.
- [COMMAND_EXECUTION]: The skill generates shell scripts using heredocs and executes them via the Bash tool. These scripts use proper quoting for variables (e.g.,
"$INPUT_FILE") and leverage standard tools (asciinema, jq, sed) to process data safely, mitigating command injection risks even with filenames containing spaces or special characters. - [DATA_EXFILTRATION]: The skill does not perform any network operations. Data ingestion and output are strictly limited to the local filesystem, as evidenced by the tool usage and code in
workflow-phases.mdandbatch-workflow.md. - [PROMPT_INJECTION]: The skill includes an indirect prompt injection surface as it processes external recording files.
- Ingestion points: Reads
.castfiles (NDJSON) inreferences/workflow-phases.mdandreferences/batch-workflow.md. - Boundary markers: The skill does not explicitly use markers, but its primary function is to sanitize recordings by stripping ANSI codes.
- Capability inventory: Uses
BashandWritetools to perform processing. - Sanitization: Employs
jqfor structured data extraction andsedpatterns to remove potentially disruptive ANSI escape sequences.
Audit Metadata