visual-validation
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs the
peekabooutility using a third-party Homebrew tap (steipete/tap/peekaboo). While the source is a well-known developer, it is an external dependency not managed by official platform registries. - [COMMAND_EXECUTION]: The skill instructs the agent to execute several shell commands, including
lsof -ti :8080 | xargs killto terminate processes andpython3 -m maggy.mainto start local services. It also invokes a local binary at~/bin/gemini-apito perform AI analysis. - [DATA_EXFILTRATION]: The skill is designed to capture full-system screenshots (
peekaboo image --mode screen). This pattern inherently risks exposing sensitive data (such as open documents, credentials in terminal windows, or private messages) to the AI model used for evaluation or to the local filesystem.
Audit Metadata