record-mac-demo
Warn
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: MEDIUMCOMMAND_EXECUTIONCREDENTIALS_UNSAFEPRIVILEGE_ESCALATIONEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/gui.shexecutes arbitrary shell snippets on a remote machine by interpolating its first argument directly into a shell environment, creating a command injection vulnerability. - [CREDENTIALS_UNSAFE]: The script
scripts/macvnc.pyprogrammatically extracts VNC passwords from the macOS keychain using thesecurityutility. - [PRIVILEGE_ESCALATION]: The skill requires passwordless
sudoon the target Mac to facilitate session switching vialaunchctl asuserand to access files in other users' directories. - [EXTERNAL_DOWNLOADS]: The skill's workflow depends on the installation of the third-party Python libraries
vncdotoolandpillow. - [INDIRECT_PROMPT_INJECTION]: The skill processes untrusted input that is interpolated into high-privilege execution contexts.
- Ingestion points: Command arguments for
scripts/gui.shand action labels for the HTTP control API. - Boundary markers: None are used to delimit the command argument within the shell script in
scripts/gui.sh. - Capability inventory: VNC-based GUI control, keychain secret retrieval, and remote shell execution with sudo.
- Sanitization: No validation or sanitization is performed on the shell snippets passed to the execution environment.
Audit Metadata