slack-copy
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill utilizes
uv run --with pyobjc-framework-Cocoato execute its clipboard management script. This involves fetching a well-known and legitimate library (pyobjc-framework-Cocoa) from a standard package registry. - [COMMAND_EXECUTION]: The skill instructs the agent to use several macOS system utilities including
pbcopy,pbpaste, andosascript. These are used as intended to manipulate and inspect the system clipboard. - [COMMAND_EXECUTION]: A local Python script (
scripts/set-clipboard.py) is executed to interface with the macOS Cocoa API. This script is used to set multiple data types (HTML and plain text) on a single pasteboard item, which is a standard procedure for rich-text clipboard operations. - [DATA_EXPOSURE]: The skill requests access to
pbpaste, which allows the agent to read the current contents of the user's clipboard. This is a legitimate requirement for the skill's debugging and verification features.
Audit Metadata