screenshot
Pass
Audited by Gen Agent Trust Hub on Oct 5, 2026
Risk Level: SAFECOMMAND_EXECUTIONDYNAMIC_EXECUTIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The Python and shell scripts execute various system utilities like
screencapture,scrot,gnome-screenshot,import,osascript, andswiftusingsubprocess.run. This is required for the skill's primary function of capturing screenshots across different operating systems. - [DYNAMIC_EXECUTION]: The tool executes Swift source code files (
.swift) at runtime using theswiftinterpreter to interact with macOS APIs for window and display information. Additionally, the PowerShell script usesAdd-Typeto compile and run C# code for accessing Windows native methods. - [PRIVILEGE_ESCALATION]: The documentation mentions using
-ExecutionPolicy Bypassfor the PowerShell script and suggests rerunning with higher permissions if the sandbox blocks access. While this involves bypassing local execution policies, it is a standard requirement for running unsigned administrative or utility scripts in a Windows environment. - [INDIRECT_PROMPT_INJECTION]: The skill provides functionality to list and select windows by name, creating a surface for indirect prompt injection.
- Ingestion points:
scripts/take_screenshot.pyreads application and window names from the operating system viascripts/macos_window_info.swift. - Boundary markers: The skill output prints paths and window information without specific delimiters or instructions for the agent to ignore embedded commands.
- Capability inventory: The skill has extensive capabilities including shell command execution via
subprocess.run(Python),bash(Shell), and C# compilation (PowerShell), as well as file system write access. - Sanitization: Application names are partially sanitized by escaping double quotes before being used in AppleScript, but window titles are not sanitized before being returned to the agent context.
Audit Metadata