record-tutorial

Remote code download and execution detected

python3 -c "from urllib

The skill instructions require the agent to execute arbitrary shell commands (e.g., `pkill`, `rm -rf`, `brew install`) that are not explicitly covered by the `allowed-tools` manifest, creating a mismatch between declared and actual capabilities.

pkill -f "$SESSION_PROFILE" 2>/dev/null || true; rm -rf "$SESSION_PROFILE"

The skill explicitly instructs the agent to ignore standard browser automation tools and use its own CLI (`vorec run`) and specific `playwright-cli` commands, creating a siloed environment that bypasses platform-level monitoring. [ensemble: confirmed by 3/3 passes; severity set to the agreed median (ADR-0067).]

You do not record with Playwright, FFmpeg, or any other tool. Only the app records. If the app is not installed, stop and tell the user to install it — do not suggest alternatives.

The skill mandates the use of `npx @vorec/cli@latest` and `npm install -g @vorec/cli` without integrity pinning or version locking. This allows arbitrary code execution from the remote registry at runtime, which is a significant supply chain risk.

npx @vorec/cli@latest run vorec.json

child_process module imported — any exec/execSync/spawn call executes OS commands

import { exec } from 'node:child_process';

NER model detected organization in skill content (confidence: 0.51)

V***

NER model detected organization in skill content (confidence: 0.71)

V****

NER model detected organization in skill content (confidence: 0.83)

D********

NER model detected organization in skill content (confidence: 0.84)

V*************

NER model detected organization in skill content (confidence: 0.70)

*

NER model detected organization in skill content (confidence: 0.96)

*

Unpinned npx package execution — `npx <pkg>` without a version pin pulls latest from npm at runtime (seen 3 times in this file at lines 165, 3680, 4092)

npx cache

Global/unverified dependency execution — global npm/yarn package, dotnet tool, or auto-confirmed npx run without version or integrity pinning (seen 4 times in this file at lines 190, 194, 668, 3677)

npm install -g

SKILL.md links to "cli-commands.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime

[./cli-commands.md](./cli-commands.md)

SKILL.md links to "context-writing.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime

[./context-writing.md](./context-writing.md)

SKILL.md links to "live-site-discovery.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime

[./live-site-discovery.md](./live-site-discovery.md)

SKILL.md links to "narration-rules.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime

[./narration-rules.md](./narration-rules.md)

SKILL.md links to "pacing.md" but the file is not part of the skill package — the workflow silently degrades or the content is sourced elsewhere at runtime

[./pacing.md](./pacing.md)