ClawHub
Back to skill

Security audit

vhs-recording

Security checks across malware telemetry and agentic risk

Overview

This skill is a straightforward VHS terminal-recording guide, with some disclosure gaps users should handle carefully before publishing or hiding recorded actions.

Install only if you want agents to help create VHS terminal recordings. Review tape files before running them, avoid hiding important or sensitive actions, and do not use public publishing unless the commands, output, paths, and environment details have been sanitized.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
95% confidence
Finding
The trigger list includes broad generic terms like "gif", "demo", and "tutorial", which can cause the skill to activate in many unrelated contexts. Because this skill executes or recommends terminal-recording workflows, unintended invocation could lead an agent to perform actions or suggest command execution when the user did not specifically request this skill.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The documentation explicitly recommends `vhs --publish`, which uploads recordings to a public external service, but it does not warn users that terminal recordings may contain sensitive commands, environment values, file paths, secrets, or internal system details. In a tool designed to capture terminal sessions, omission of a disclosure warning materially increases the chance of accidental data exposure.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
The documented `Hide`/`Show` feature explicitly enables execution of terminal commands that will not be visible in the recording, and the reference does not warn users about the security and trust implications of concealed actions. In a skill whose purpose is creating demo recordings, this can be abused to perform hidden setup, modify files, exfiltrate data, or misrepresent what a workflow actually does while presenting an apparently benign terminal session.

VirusTotal

64/64 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.