yabai-skhd-doctor
Pass
Audited by Gen Agent Trust Hub on Jul 10, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The script
scripts/diagnose.shexecutes several macOS system utilities (launchctl,sw_vers,id,csrutil) and service binaries (yabai,skhd) to collect health data. These commands are used solely for diagnostic purposes. - [DATA_EXPOSURE]: The skill checks for the existence of configuration files in standard locations (e.g.,
~/.config/yabai/yabairc) and reads error logs in/tmp. It does not read sensitive contents or transmit any data over the network. - [INDIRECT_PROMPT_INJECTION]: The script captures output from external sources, such as binary version strings and system logs in
/tmp, and prints them to the terminal. While this data is technically attacker-controllable, the script only uses it for display in a diagnostic report, posing negligible risk to the agent's logic.
Audit Metadata