macos-clipboard
Pass
Audited by Gen Agent Trust Hub on Mar 6, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes standard macOS binaries
pbcopyandpbpasteto interact with the system clipboard. - [COMMAND_EXECUTION]: Uses shell redirection (e.g.,
pbcopy < file,pbpaste > file) to transfer data between the clipboard and local files. - [INDIRECT_PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection if the user's clipboard contains malicious instructions.
- Ingestion points: Content read via the
pbpastecommand inSKILL.md. - Boundary markers: No specific delimiters or safety instructions are defined to separate clipboard content from agent instructions.
- Capability inventory: The skill can read/write to the clipboard and read/write to local files via shell redirection.
- Sanitization: No sanitization or validation of the clipboard content is performed before processing.
Audit Metadata