peekaboo
Pass
Audited by Gen Agent Trust Hub on Jul 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
peekabooCLI to perform UI automation on macOS systems. - It executes commands for mouse interaction (
click,drag,move,scroll,swipe), keyboard input (type,press,hotkey), and application management (app launch,window focus,dock launch). - The
peekaboo runcommand allows execution of automation scripts defined in JSON format. - [EXTERNAL_DOWNLOADS]: The skill includes instructions to install external software using the Homebrew package manager.
- The installation target is the
peekabooformula located in thesteipete/tapthird-party repository. - [DATA_EXFILTRATION]: The skill accesses highly sensitive system information to facilitate automation.
peekaboo capture,peekaboo image, andpeekaboo seecapture screen content, including windows and menu bars.peekaboo clipboardprovides the ability to read and write the system clipboard, which often contains sensitive data.peekaboo listandpeekaboo dialogenumerate running applications, open windows, and system dialog content.- [PROMPT_INJECTION]: The skill facilitates indirect prompt injection by processing external data from the screen.
- Ingestion points: Text and UI elements captured from the screen via the
seeandcapturecommands. - Boundary markers: The instructions do not define delimiters or warnings to ignore instructions found within captured UI text.
- Capability inventory: The tool possesses broad capabilities to execute system commands, type text, and manipulate applications.
- Sanitization: There is no evidence of filtering or sanitization applied to text extracted from the UI before it is returned to the agent context.
Audit Metadata