tiez-clipboard-manager

Pass

Audited by Gen Agent Trust Hub on Oct 8, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill instructs the user to download the official Rust toolchain installer from sh.rustup.rs. This is a standard and safe procedure for setting up a Rust development environment.
  • [REMOTE_CODE_EXECUTION]: The installation process involves piping the official Rust installer script to the shell (curl ... | sh). This is the well-known and trusted method for installing the Rust compiler toolchain.
  • [COMMAND_EXECUTION]: The skill defines standard development commands for cloning the repository, installing dependencies via pnpm, and building the Tauri-based application using pnpm tauri build.
  • [INDIRECT_PROMPT_INJECTION]: The application is designed to ingest and process untrusted clipboard data.
  • Ingestion points: Clipboard monitoring logic in src-tauri/src/clipboard/monitor.rs and history loading in src/components/ClipboardHistory.tsx.
  • Boundary markers: None explicitly defined in the provided code snippets.
  • Capability inventory: The backend logic includes network operations (WebDAV/MQTT sync), file system access (SQLite database), and clipboard manipulation.
  • Sanitization: The skill includes a mask_sensitive_data function in src-tauri/src/privacy/masking.rs which uses regular expressions to redact phone numbers, emails, and credit card numbers from clipboard content previews.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 8, 2026, 11:45 PM