ClawHub
Back to skill

Security audit

Record screen, microphone or camera from macOS terminal

Security checks across malware telemetry and agentic risk

Overview

This skill openly helps users record Mac audio, screen, and camera with consent, but it should be used carefully because it captures sensitive media.

Install only if you intentionally want a terminal-based macOS recording tool and trust the third-party Homebrew tap. Confirm every recording request, prefer short durations and narrow targets such as a specific window or region, choose output paths deliberately, and revoke microphone, camera, or screen permissions when no longer needed.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
93% confidence
Finding
The trigger description is broad enough to activate on common terms like 'record', 'photo', 'camera', or 'screenshot', which can cause an agent to invoke a capability that captures sensitive audio, video, screen, or camera data in contexts the user did not specifically intend. In this skill, that risk is amplified because the action space involves privacy-sensitive recording operations, so over-triggering can lead to inappropriate suggestions or attempted collection of sensitive data.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The file documents commands for microphone and system audio capture, including mixed capture and device/display selection, but does not provide an explicit privacy warning, consent requirement, or guidance to avoid recording other people or sensitive audio without authorization. Because audio recording is privacy-sensitive and can enable covert collection of conversations or system playback, the omission increases the risk of misuse even if the document is only a reference.

Missing User Warnings

Medium
Confidence
91% confidence
Finding
The documentation provides ready-to-use examples for webcam and microphone capture without any explicit privacy or consent warning. In an agent skill context, this can normalize or enable privacy-sensitive recording behavior and make it easier for downstream agents or users to invoke surveillance-like actions without clear notice, especially when `--audio` is shown alongside camera recording examples.

VirusTotal

66/66 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.