macpilot-dialog-handler
Pass
Audited by Gen Agent Trust Hub on Mar 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes
macpilotCLI commands to perform UI automation tasks such as interacting with file dialogs, navigating directories, and simulating keyboard inputs. This is the intended functionality and occurs locally in SKILL.md. - [PROMPT_INJECTION]: The skill is subject to indirect prompt injection risks as it processes strings from the operating system UI that could potentially contain malicious instructions. Ingestion points: Filenames and UI labels retrieved via
list-filesandinspectin file SKILL.md. Boundary markers: None present to distinguish UI data from instructions. Capability inventory: OS-level interactions includingfile-saveandkeyboardcommands in SKILL.md. Sanitization: None performed on the ingested UI content.
Audit Metadata