clipboard
Pass
Audited by Gen Agent Trust Hub on Sep 8, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill uses a bash block to execute the
pbcopycommand. It correctly utilizes a quoted heredoc (<<'EOF') when piping content to stdin. This is a critical safety measure that ensures the shell treats the content as a literal string, preventing variable expansion or command substitution attacks that could occur if the AI-generated content contained shell-sensitive characters like backticks or dollar signs. - [INDIRECT_PROMPT_INJECTION]: The skill provides an interface to transfer data from the AI's output (which may be influenced by untrusted external inputs) to the system clipboard.
- Ingestion points: The skill processes the "most recent content generated" or specific items named by the user in the chat context as described in
SKILL.md. - Boundary markers: The implementation uses
<<'EOF'as a boundary marker in the shell execution context to prevent interpolation. - Capability inventory: The skill has the capability to write to the system clipboard via
pbcopy. - Sanitization: The skill includes logic to strip markdown syntax and dedent lines, which serves to clean the data and potentially removes hidden formatting used in indirect injection attempts.
Audit Metadata