kde-connect-ops
Pass
Audited by Gen Agent Trust Hub on Oct 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses the
kdeconnect-clisystem utility to perform device management and data transfer tasks. - Evidence includes commands for listing devices (
--list-devices), pairing (--pair), and sending data (--share,--send-sms). - [INDIRECT_PROMPT_INJECTION]: The skill facilitates communication with external mobile devices, creating an attack surface where untrusted data could be introduced to the agent's context (e.g., via clipboard sync or incoming SMS), though the provided instructions focus on outgoing actions.
- Ingestion points: None explicitly defined in the CLI commands, but the skill notes that clipboard synchronization occurs automatically via the
kdeconnectddaemon. - Boundary markers: None present in the instructions to delimit or sanitize incoming device data.
- Capability inventory: The skill has the capability to read local files (via
--share) and send them to external devices. - Sanitization: No evidence of sanitization for outgoing text or shared file paths.
Audit Metadata