asciinema-converter
Pass
Audited by Gen Agent Trust Hub on Feb 28, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill makes extensive use of the
Bashtool to execute file discovery commands (find,fd), file metadata extraction (stat,ls,wc), and the primary conversion utility (asciinema convert). These commands are appropriately quoted and include logic to handle filenames with spaces or special characters safely. - [EXTERNAL_DOWNLOADS]: The documentation and preflight checks recommend installing or upgrading the
asciinemaCLI via Homebrew (brew install asciinema). Homebrew is a well-known and trusted package management service. - [PROMPT_INJECTION]: The instructions use strong prescriptive language (e.g., 'IMPORTANT: All phases are MANDATORY') to ensure the agent follows a multi-step workflow. These are operational constraints intended to ensure data integrity and user consent through
AskUserQuestionat decision points, rather than attempts to bypass AI safety guidelines. - [DATA_EXPOSURE]: The skill facilitates the processing of terminal session recordings which may contain sensitive user activity. It addresses this by providing tools to convert high-volume NDJSON data into clean, searchable text, effectively increasing the visibility of local data to the AI agent. No automated network exfiltration was detected in the provided scripts.
Audit Metadata