peekaboo
Pass
Audited by Gen Agent Trust Hub on Aug 1, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill requires the
peekaboobinary, which is installed through a Homebrew tap (steipete/tap/peekaboo). This is a standard installation method for macOS developer tools.- [COMMAND_EXECUTION]: The skill interacts with the macOS UI and system processes via thepeekabooCLI, performing actions like clicking elements, typing text, and managing windows to automate user workflows.- [DATA_EXFILTRATION]: The tool can access sensitive information by reading the system clipboard and capturing screen images or video as part of its core functionality for UI inspection and automation.- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface when using vision-based analysis commands that process external data. - Ingestion points: Screen content processed by
peekaboo see --analyzeorpeekaboo image --analyze(file: SKILL.md). - Boundary markers: No explicit delimiters or instructions to ignore embedded content are defined in the skill instructions.
- Capability inventory: Extensive UI interaction (clicking, typing) and system control (launching apps, clipboard access) provided by the
peekabooCLI. - Sanitization: No evidence of sanitization or filtering for captured UI text or elements before they are analyzed.
Audit Metadata