kakaotalk-mac
Warn
Audited by Gen Agent Trust Hub on Apr 13, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill installs a third-party tool from a non-standard source using the command
brew install silver-flight-group/tap/kakaocli. - [DATA_EXFILTRATION]: The skill requests the user to grant Full Disk Access to their terminal application. This permission is used to allow
kakaoclito read the KakaoTalk local database, which exposes private conversation history to the AI agent. - [COMMAND_EXECUTION]: The skill executes various system commands to manage software installation (
mas install,brew install) and perform UI automation via macOS Accessibility permissions. - [PROMPT_INJECTION]: The skill is vulnerable to indirect prompt injection:
- Ingestion points: Untrusted chat messages and search results are retrieved from the local database via
kakaocli messagesandkakaocli searchin SKILL.md. - Boundary markers: Absent; chat data is processed without isolation delimiters or instructions to ignore embedded commands.
- Capability inventory: The skill has shell execution capabilities used for sending messages and installing software.
- Sanitization: Absent; no validation or escaping of external message content is performed before processing.
Audit Metadata