clicklight-macos-click-highlighter
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATIONCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill facilitates the installation of external software by providing commands to add a Homebrew tap and clone source code from a GitHub repository (
github.com/aurorascharff/ClickLight). Since this source is not from a verified or well-known organization, users should exercise caution when executing these commands. - [PRIVILEGE_ESCALATION]: The skill instructs users on how to grant 'Accessibility' permissions to the ClickLight application. While this permission is required for the application to detect mouse clicks system-wide, it is a high-privilege permission that can allow an application to monitor all user interactions. The skill correctly directs users to perform this action manually via macOS System Settings.
- [COMMAND_EXECUTION]: The skill contains several shell commands for building the application (
swift build,make), managing preferences via thedefaultsutility, and performing diagnostics. One troubleshooting command attempts to read the macOS Transparency, Consent, and Control (TCC) database (TCC.db) usingsqlite3to verify accessibility permissions; this is a sensitive system file typically protected by System Integrity Protection (SIP).
Audit Metadata