canvas-capture-extension
What this skill does
The skill is a development tool for rebuilding, installing, and reloading the Remotion Canvas Capture Chrome extension. It is used in a development or testing context, not for security or teaching pur
github/remotion-dev - Hardcoded Paths - 56k stars
Threat analysis
Skill info
pkg:github/remotion-dev/remotion@78c2a5f?skill=canvas-capture-extensionAssessments (2)
Hardcoded Paths
Hardcoded Paths via local-llm-review
scripts/rebuild-extension.sh
install_dir="/Users/jonathanburger/Applications/Remotion Canvas Capture Extension" and browser_executable="/Users/jonathanburger/Applications/Recorder Chrome.app/Contents/MacOS/Google Chrome for TestiPotential Dependency on Specific Chrome Version
Potential Dependency on Specific Chrome Version via local-llm-review
scripts/rebuild-extension.sh
The script checks for a specific Chrome version (`150.0.7842.0`), which may cause issues if the user is not running that exact version, potentially leading to unexpected behavior or failure.Badge
Add the Anomity scan badge for canvas-capture-extension to your README.
How Anomity governs this at runtime
Scan-time vetting tells you what a skill says it will do. Anomity's Endpoint Sensor sees what agents actually do: it discovers skills alongside every other AI artifact on the endpoint, and runtime governance can allow, deny, or log the tool calls a skill triggers. Policy violations route to your SIEM, Slack, email, or Jira, backed by a queryable 90-day audit trail.
Book a 30-minute demo to see your own skill inventory.
Methodology and disputes
Every skill is assessed by the Anomity Skill Intelligence engine against its public source; findings indicate risk patterns, not confirmed exploitation. Maintainer of canvas-capture-extension? Report an issue or request a rescan.
