peekaboo

Pass

Audited by Gen Agent Trust Hub on Aug 1, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADSDATA_EXFILTRATIONPROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill requires the peekaboo binary, which is installed through a Homebrew tap (steipete/tap/peekaboo). This is a standard installation method for macOS developer tools.- [COMMAND_EXECUTION]: The skill interacts with the macOS UI and system processes via the peekaboo CLI, performing actions like clicking elements, typing text, and managing windows to automate user workflows.- [DATA_EXFILTRATION]: The tool can access sensitive information by reading the system clipboard and capturing screen images or video as part of its core functionality for UI inspection and automation.- [PROMPT_INJECTION]: The skill exhibits an indirect prompt injection surface when using vision-based analysis commands that process external data.
  • Ingestion points: Screen content processed by peekaboo see --analyze or peekaboo image --analyze (file: SKILL.md).
  • Boundary markers: No explicit delimiters or instructions to ignore embedded content are defined in the skill instructions.
  • Capability inventory: Extensive UI interaction (clicking, typing) and system control (launching apps, clipboard access) provided by the peekaboo CLI.
  • Sanitization: No evidence of sanitization or filtering for captured UI text or elements before they are analyzed.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 1, 2026, 08:32 AM
Security Audit — agent-trust-hub — peekaboo