auto-click-cdp-popup
Warn
Audited by Gen Agent Trust Hub on Jul 2, 2026
Risk Level: MEDIUMEXTERNAL_DOWNLOADSCOMMAND_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads and installs a software package from the author's Homebrew repository (
schroneko/homebrew-cdpclick). - [COMMAND_EXECUTION]: Executes several shell commands to manage the application life cycle, including
brew install --cask,cdpclick-install-agent(for persistence), and direct execution of the binary/Applications/AutoClickCDPPopup.app/Contents/MacOS/auto-click-cdp-popup. - [COMMAND_EXECUTION]: Instructs the agent to perform process monitoring using
pgrep -fl AutoClickCDPPopupand to read system log files at~/Library/Logs/auto-click-cdp-popup/actions.log. - [PRIVILEGE_MANAGEMENT]: The skill requires the user to manually grant 'Accessibility' permissions to the installed application. This is a sensitive permission that allows an application to monitor and control other windows and user interactions across the macOS operating system.
- [PERSISTENCE]: The
cdpclick-install-agentcommand installs a macOS LaunchAgent, which ensures the watcher application starts automatically whenever the user logs in.
Audit Metadata