peekaboo
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDATA_EXFILTRATIONPRIVILEGE_ESCALATIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the installation of the Peekaboo binary via a third-party Homebrew tap ('steipete/tap/peekaboo'). This introduces an external dependency that is not from a pre-verified trusted organization.- [PRIVILEGE_ESCALATION]: The skill requires macOS Accessibility and Screen Recording permissions. These are high-level system permissions that grant the skill the ability to monitor the entire screen and control the user interface across all applications.- [COMMAND_EXECUTION]: The tool provides capabilities to simulate user input, including keystrokes ('peekaboo type'), hotkeys ('peekaboo hotkey'), and clipboard operations ('peekaboo paste'). These functions allow the agent to execute actions and input data into any running application.- [DATA_EXFILTRATION]: The skill can capture and extract information from the user's environment through screen captures ('peekaboo image', 'peekaboo see'), listing open windows and applications, and reading the system clipboard ('peekaboo clipboard').- [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted data from the UI and external applications which may contain malicious instructions targeting the agent.
- Ingestion points: Screen captures ('see', 'image'), clipboard content ('clipboard'), and UI element metadata ('list windows').
- Boundary markers: None identified.
- Capability inventory: Keystroke injection, clipboard access, screen recording, window management, and application launching.
- Sanitization: None identified.- [DYNAMIC_EXECUTION]: The 'peekaboo run' command allows for the execution of automation scripts defined in JSON format, which can trigger sequences of UI interactions.
Audit Metadata