karabiner
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFECOMMAND_EXECUTIONPERSISTENCEEXTERNAL_DOWNLOADSINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides templates and examples for mapping keyboard shortcuts to arbitrary shell commands and AppleScript, such as using
open -a Safariorosascriptwithin the EDN configuration.\n- [PERSISTENCE]: The skill recommends startinggokuas a system service usingbrew services start goku, which establishes a persistent background process on macOS to monitor configuration changes.\n- [EXTERNAL_DOWNLOADS]: The skill instructs the agent or user to install thegokuutility from a third-party Homebrew tap (yqrashawn/goku/goku) and references external resources on GitHub for extended documentation.\n- [INDIRECT_PROMPT_INJECTION]: The skill creates a surface for indirect prompt injection by generating content for the~/.config/karabiner.ednfile, which is then compiled into system-level keyboard triggers that can execute commands.\n - Ingestion points:
~/.config/karabiner.edn(referenced in SKILL.md).\n - Boundary markers: None identified in the provided templates or instructions.\n
- Capability inventory: Shell command execution (
open, etc.), AppleScript execution (osascript), and file modification.\n - Sanitization: No validation or sanitization logic is provided for the shell commands embedded in the configuration.
Audit Metadata