clicklight-macos-click-highlighter

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONCOMMAND_EXECUTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of external software by providing commands to add a Homebrew tap and clone source code from a GitHub repository (github.com/aurorascharff/ClickLight). Since this source is not from a verified or well-known organization, users should exercise caution when executing these commands.
  • [PRIVILEGE_ESCALATION]: The skill instructs users on how to grant 'Accessibility' permissions to the ClickLight application. While this permission is required for the application to detect mouse clicks system-wide, it is a high-privilege permission that can allow an application to monitor all user interactions. The skill correctly directs users to perform this action manually via macOS System Settings.
  • [COMMAND_EXECUTION]: The skill contains several shell commands for building the application (swift build, make), managing preferences via the defaults utility, and performing diagnostics. One troubleshooting command attempts to read the macOS Transparency, Consent, and Control (TCC) database (TCC.db) using sqlite3 to verify accessibility permissions; this is a sensitive system file typically protected by System Integrity Protection (SIP).
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 11:44 PM