auto-click-cdp-popup

CRITICAL E006: Malicious code pattern detected in skill scripts.

• Malicious code pattern detected (high risk: 1.00). This watcher deliberately automates acceptance of Chrome DevTools Protocol/"full control" prompts using macOS Accessibility and runs persistently via a LaunchAgent, which directly enables remote debugging/session takeover (remote code execution and credential/session theft) and therefore functions as an enabler for backdoor abuse; the "install-only-via-Homebrew / do not build locally" instruction further raises supply-chain/obfuscation concerns.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (high risk: 0.70). The required runtime workflow runs the Homebrew-installed /Applications/AutoClickCDPPopup.app which uses macOS Accessibility (AXObserver) to read Chrome UI element accessible text (e.g., button labels/prompt text) and then clicks; this is outsider-authored free text originating from the user’s Chrome UI/session, not authored by the operating user.

MEDIUM W013: Attempt to modify system services in skill instructions.

• Attempt to modify system services in skill instructions detected (high risk: 0.90). This prompt instructs installing a third‑party Homebrew cask, registering a LaunchAgent and granting macOS Accessibility permissions to an app (giving it UI control), which modifies system state and security settings and can compromise the machine.