visual-validation

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill installs the peekaboo utility using a third-party Homebrew tap (steipete/tap/peekaboo). While the source is a well-known developer, it is an external dependency not managed by official platform registries.
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute several shell commands, including lsof -ti :8080 | xargs kill to terminate processes and python3 -m maggy.main to start local services. It also invokes a local binary at ~/bin/gemini-api to perform AI analysis.
  • [DATA_EXFILTRATION]: The skill is designed to capture full-system screenshots (peekaboo image --mode screen). This pattern inherently risks exposing sensitive data (such as open documents, credentials in terminal windows, or private messages) to the AI model used for evaluation or to the local filesystem.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 01:45 PM
Security Audit — agent-trust-hub — visual-validation