skills/johnlindquist/claude/karabiner/Gen Agent Trust Hub

karabiner

Pass

Audited by Gen Agent Trust Hub on Sep 16, 2026

Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides templates and examples for mapping keyboard shortcuts to arbitrary shell commands and AppleScript, such as using open -a Safari or osascript within the EDN configuration.\n- [PERSISTENCE]: The skill recommends starting goku as a system service using brew services start goku, which establishes a persistent background process on macOS to monitor configuration changes.\n- [EXTERNAL_DOWNLOADS]: The skill instructs the agent or user to install the goku utility from a third-party Homebrew tap (yqrashawn/goku/goku) and references external resources on GitHub for extended documentation.\n- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by generating content for the ~/.config/karabiner.edn file, which is then compiled into system-level keyboard triggers that can execute commands.\n
  • Ingestion points: ~/.config/karabiner.edn (referenced in SKILL.md).\n
  • Boundary markers: None identified in the provided templates or instructions.\n
  • Capability inventory: Shell command execution (open, etc.), AppleScript execution (osascript), and file modification.\n
  • Sanitization: No validation or sanitization logic is provided for the shell commands embedded in the configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 16, 2026, 08:25 PM
Security Audit — agent-trust-hub — karabiner