Clipboard Manager

剪贴板历史管理工具。保存剪贴板历史，快速搜索和重复粘贴。适合频繁复制粘贴的用户。

Security Scan

The skill's code matches the stated clipboard-manager purpose, but it has a few inconsistencies and privacy risks (undeclared clipboard binaries dependency, stores clipboard contents in plaintext in your home directory, and comes from an unknown source).

Purpose & Capability

Name/description align with the included script: the Python program implements clipboard history, search, pin, paste, clear, and monitor features and persists data to ~/.clipboard_history.json. The declared requirement (python3 in _meta.json) matches the language runtime.

Instruction Scope

SKILL.md instructs running scripts/clipboard.py subcommands which is consistent with the code. However the runtime relies on platform clipboard utilities (xclip on Linux, pbcopy/pbpaste on macOS) which are used by the script but not declared anywhere in the skill metadata; SKILL.md mentions an optional CLIPBOARD_MAX env var but this is not declared in requires.env (it's optional, but worth noting). The instructions do not access network endpoints or unrelated system credentials.

Install Mechanism

No install spec (instruction-only with included script) — lowest install risk. The package does not download code from external URLs or run installers. The included code will write a data file to the user's home when run.

Credentials

The skill does not request external credentials (good), but it persistently stores all captured clipboard contents (potentially including passwords, tokens, or other secrets) in plaintext at ~/.clipboard_history.json without encryption or access controls. This is a privacy/security risk disproportionate to a casual helper if you copy sensitive data. Also relies on system binaries (xclip/pbcopy) that must exist for full functionality.

Persistence & Privilege

The skill is not always-enabled and doesn't request elevated privileges or modify other skills. Its persistence is limited to creating and updating a file in the user's home and running when invoked (or when you run the monitor command). Autonomous invocation is allowed by platform defaults but not set to always:true.

What to consider before installing

This skill's functionality is coherent, but review these before installing: (1) Author and homepage are unknown — exercise caution running third-party scripts. (2) The script saves all clipboard contents to ~/.clipboard_history.json in plaintext; if you copy passwords or tokens the file will contain them. Consider not running the monitor or using it only on a trusted machine, set strict file permissions, or modify the script to encrypt sensitive entries. (3) The script uses xclip (Linux) or pbcopy/pbpaste (macOS); ensure those binaries exist and come from your OS package manager. (4) If you need stronger guarantees, inspect or run the script in a sandbox, or request a signed/reputable distribution with a homepage/source. If you proceed, consider rotating any secrets that may have been copied before enabling the monitor.

管理剪贴板历史，快速搜索和重复粘贴。

功能

• 📋 自动保存剪贴板历史
• 🔍 快速搜索历史记录
• 📌 固定常用内容
• 🗑️ 清理历史
• ⌨️ 快速粘贴

使用方法

查看历史

python3 scripts/clipboard.py history

搜索

python3 scripts/clipboard.py search "关键词"

固定内容

python3 clipboard.py pin 1

粘贴

python3 clipboard.py paste 1

清空历史

python3 clipboard.py clear

配置

# 最大保存条数
export CLIPBOARD_MAX=100

示例

# 查看最近10条
python3 scripts/clipboard.py history --limit 10

# 搜索包含 "密码" 的记录
python3 scripts/clipboard.py search "密码"

# 固定第1条
python3 scripts/clipboard.py pin 1