clipboard
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill identifies and utilizes native system clipboard utilities like pbcopy, xclip, and clip.exe. It correctly employs shell piping with printf to ensure that track content is treated as a literal string, which effectively mitigates the risk of command injection during the copying process.
- [INDIRECT_PROMPT_INJECTION]: The skill contains a data ingestion surface as it reads track files via a vendor-provided MCP tool. Evidence Chain: (1) Ingestion Point: Markdown track files read through the format_for_clipboard tool. (2) Boundary Markers: None explicitly defined in the instruction set. (3) Capability Inventory: Execution of shell commands via Bash for clipboard interaction. (4) Sanitization: The skill instructs the agent to use printf '%s' when piping content, ensuring that processed data is not interpreted as shell commands.
- [EXTERNAL_DOWNLOADS]: The documentation provides instructions for users to install well-known and legitimate Linux clipboard utilities (xclip, xsel) from official system package repositories if they are missing from the environment.
Audit Metadata