screencapture-mac
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands on the host system, specifically the built-in macOS
screencaptureutility for acquiring images andrmfor file deletion. It also suggests usingosascriptto interface with System Events to retrieve window identifiers.\n- [INDIRECT_PROMPT_INJECTION]: The skill processes screenshots which represent untrusted visual data from the user's environment. This data could contain malicious instructions, text, or UI elements designed to manipulate the agent's behavior at runtime.\n - Ingestion points: Image files created by the
screencapturetool as described in the Core Workflow section ofSKILL.md.\n - Boundary markers: None; the agent is expected to interpret the multimodal visual content directly without delimiters.\n
- Capability inventory: Access to
screencapture,osascript, andrmas documented inSKILL.md.\n - Sanitization: No validation or sanitization of the screen content is performed before processing.
Audit Metadata