hammerspoon
Pass
Audited by Gen Agent Trust Hub on Sep 21, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill references downloading the 'ShiftIt' Spoon from a GitHub repository and the official Hammerspoon Spoon library.
- [DYNAMIC_EXECUTION]: Documents the 'SpoonInstall' module which dynamically fetches and executes Lua plugins from remote sources as part of its package management functionality.
- [COMMAND_EXECUTION]: Explains the use of the 'hs' CLI tool for executing arbitrary Lua scripts, which is a core capability of the Hammerspoon application.
- [INDIRECT_PROMPT_INJECTION]: The skill uses APIs like 'hs.window.focusedWindow():title()' to read system metadata. 1. Ingestion points: focused window title in SKILL.md. 2. Boundary markers: None. 3. Capability inventory: Arbitrary Lua execution, system alerts, and notification sending. 4. Sanitization: None. This reflects the standard operational surface of an automation tool.
Audit Metadata