Security audit
Demo GIF Skill
Security checks for vulnerabilities and agentic risk
Overview
The skill is a coherent demo-GIF helper that uses disclosed recording, rendering, optimization, and README-editing workflows without hidden data collection or unrelated authority.
Install only if you want an agent to create and run demo-recording scripts in a repository. Review any generated .tape, Playwright, ffmpeg, npm, Docker, or sudo commands before execution, and avoid recording flows that expose secrets, private data, or live production accounts.
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Static analysis
No suspicious patterns detected.