videodb-monitoring
Pass
Audited by Gen Agent Trust Hub on Apr 14, 2026
Risk Level: SAFEDATA_EXFILTRATIONCOMMAND_EXECUTION
Full Analysis
- [DATA_EXFILTRATION]: The skill's primary function is to capture the user's screen and system audio and transmit this data to VideoDB's official servers (videodb.io). While this involves transmitting sensitive activity, it is the stated purpose of the skill and targets the vendor's own infrastructure.
- [COMMAND_EXECUTION]: The skill utilizes local shell commands via
execSyncandspawnto manage its background monitoring process, update local configuration state, and prevent the system from entering sleep mode during recording sessions. - [CREDENTIALS_UNSAFE]: The documentation and code instruct users on how to store a VideoDB API key within the host platform's standard configuration file (~/.openclaw/openclaw.json). This follows the platform's established practices for secret management.
Audit Metadata