rewind
Pass
Audited by Gen Agent Trust Hub on Jul 24, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill documentation directs users to download the prerequisite 'Clips Desktop' app from
https://clips.agent-native.com/download. This is the official vendor-managed site for the required software. - [COMMAND_EXECUTION]: The skill provides
npxcommands (e.g.,npx -y @agent-native/core@latest) to automate the installation of the local agent connection. These commands execute packages from the author's official@agent-nativenpm scope and are intended for initial environment setup. - [PROMPT_INJECTION]: The skill ingests untrusted content from the user's screen through OCR, transcripts, and frame context. This creates a surface for indirect prompt injection where content displayed on the screen could influence the agent's behavior.
- Ingestion points: Data is ingested via the
screen_memory_recent_contextandscreen_memory_search_chapterstools defined inSKILL.md. - Boundary markers: The skill instructions do not explicitly define boundary markers or 'ignore' instructions for the data returned by the tools.
- Capability inventory: The skill is primarily focused on data retrieval and local configuration; it does not possess high-privilege write capabilities or direct network exfiltration tools within its primary logic.
- Sanitization: There is no evidence of sanitization or filtering applied to the retrieved screen text within the skill's instructions.
Audit Metadata