tiez-clipboard-manager
Pass
Audited by Gen Agent Trust Hub on Oct 8, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSREMOTE_CODE_EXECUTIONCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill instructs the user to download the official Rust toolchain installer from
sh.rustup.rs. This is a standard and safe procedure for setting up a Rust development environment. - [REMOTE_CODE_EXECUTION]: The installation process involves piping the official Rust installer script to the shell (
curl ... | sh). This is the well-known and trusted method for installing the Rust compiler toolchain. - [COMMAND_EXECUTION]: The skill defines standard development commands for cloning the repository, installing dependencies via
pnpm, and building the Tauri-based application usingpnpm tauri build. - [INDIRECT_PROMPT_INJECTION]: The application is designed to ingest and process untrusted clipboard data.
- Ingestion points: Clipboard monitoring logic in
src-tauri/src/clipboard/monitor.rsand history loading insrc/components/ClipboardHistory.tsx. - Boundary markers: None explicitly defined in the provided code snippets.
- Capability inventory: The backend logic includes network operations (WebDAV/MQTT sync), file system access (SQLite database), and clipboard manipulation.
- Sanitization: The skill includes a
mask_sensitive_datafunction insrc-tauri/src/privacy/masking.rswhich uses regular expressions to redact phone numbers, emails, and credit card numbers from clipboard content previews.
Audit Metadata