Skill flagged — suspicious patterns detected

ClawHub Security flagged this skill as suspicious. Review the scan results before using.

peekaboo-cli

v1.0.0

macOS UI automation CLI tool for screen capture, window control, element clicking, text input, and more. Use when users need macOS desktop automation, UI tes...

0· 151·0 current·0 all-time
byNEE@terryso

Install

OpenClaw Prompt Flow

Install with OpenClaw

Best for remote or guided setup. Copy the exact prompt, then paste it into OpenClaw for terryso/peekaboo-cli.

Previewing Install & Setup.
Prompt PreviewInstall & Setup
Install the skill "peekaboo-cli" (terryso/peekaboo-cli) from ClawHub.
Skill page: https://clawhub.ai/terryso/peekaboo-cli
Keep the work scoped to this skill only.
After install, inspect the skill metadata and help me finish setup.
Use only the metadata you can verify from ClawHub; do not invent missing requirements.
Ask before making any broader environment changes.

Command Line

CLI Commands

Use the direct CLI path if you want to install manually and keep every step visible.

OpenClaw CLI

Bare skill slug

openclaw skills install peekaboo-cli

ClawHub CLI

Package manager switcher

npx clawhub@latest install peekaboo-cli
Security Scan
VirusTotalVirusTotal
Suspicious
View report →
OpenClawOpenClaw
Benign
medium confidence
Purpose & Capability
Name/description (macOS UI automation) align with the provided SKILL.md and many reference docs. The skill is instruction-only and relies on the Peekaboo CLI; it does not request unrelated credentials or binaries. The allowed tool set (Bash(peekaboo:*)) matches the declared purpose.
Instruction Scope
SKILL.md and the references consistently instruct running peekaboo CLI commands (see, click, type, capture, clipboard, config, agent, etc.). These are within the stated scope (desktop automation and UI capture). However many commands allow saving or emitting screenshots, reading/restoring the clipboard, and reading/modifying Peekaboo config (~/.peekaboo/), which are sensitive operations; the instructions do not limit or sanitize what gets captured or transmitted.
Install Mechanism
This is an instruction-only skill with no install spec or embedded code; that is the lowest install risk. The README points users to install Peekaboo via Homebrew/GitHub (expected for a CLI), which is usual for this type of tool.
!
Credentials
The skill declares no required environment variables, which is appropriate. But the Peekaboo CLI exposed by the skill can access highly sensitive local state: screen captures, the system clipboard, saved snapshots, and the Peekaboo config (which may contain API keys or provider credentials). Although those accesses are coherent with UI automation, they materially increase risk if the skill or agent is untrusted because they enable exfiltration of private data.
Persistence & Privilege
Skill flags show no special persistence (always:false) and model invocation is allowed (default). The skill does not request to modify other skills or system-wide agent settings. Autonomous invocation is platform-default — not a new privilege introduced here.
Assessment
This skill is internally consistent for macOS UI automation: it expects you to have the Peekaboo CLI and macOS accessibility/screen-recording permissions. Before installing or enabling it, confirm you trust the skill's publisher (no homepage/source is provided here). Key things to consider: - Sensitive access: Peekaboo can capture full-screen screenshots, read/write clipboard contents, drive keystrokes, and read ~/.peekaboo config (which may contain API keys). Treat those capabilities as high-risk — they can expose secrets or private content. - Source integrity: The skill metadata shows no homepage/source. Prefer installing Peekaboo from the official repo or Homebrew tap linked in the docs (verify the tap and repository). Inspect the skill files you copy into ~/.openclaw/ or ~/.claude/ before enabling. - Least privilege: Only grant macOS Screen Recording and Accessibility permissions if you trust the tool. Consider granting permissions to a dedicated, sandboxed terminal or temporary account if you need to limit exposure. - Operation mode: Use dry-run or interactive modes first (e.g., peekaboo agent --dry-run or --chat) to confirm what the skill will run before allowing autonomous runs. Avoid enabling broad autonomous invocations for skills that can capture screens/clipboard unless publisher and code are verified. - Audit outputs: Be cautious of commands that send captured images or metadata to external AI providers (the CLI supports an "--analyze" flag and provider config). Review ~/.peekaboo/config and provider entries to ensure no accidental outward transmission of sensitive screenshots or credentials. If you need stronger assurance, obtain the upstream source (GitHub repo), inspect the CLI/tooling, and confirm the skill files haven't been tampered with. If you cannot verify the origin, treat the skill as untrusted despite internal coherence.

Like a lobster shell, security has layers — review code before you run it.

latestvk970232hmarpde9b96sy2h3pr183hgmg
151downloads
0stars
1versions
Updated 1mo ago
v1.0.0
MIT-0

Peekaboo CLI

macOS UI automation command-line tool providing complete desktop control capabilities.

Installation

Copy this skill to your agent's skills directory:

# Claude Code
mkdir -p ~/.claude/skills/peekaboo-cli
cp -r . ~/.claude/skills/peekaboo-cli/

# OpenClaw
mkdir -p ~/.openclaw/skills/peekaboo-cli
cp -r . ~/.openclaw/skills/peekaboo-cli/

Prerequisites

  • Peekaboo CLI installed (brew install steipete/tap/peekaboo)
  • macOS Screen Recording and Accessibility permissions granted

Pre-execution Validation

Before executing any CLI commands, verify permission status first.

1. Check Permission Status

peekaboo permissions status

2. Grant Permissions (if needed)

If permissions are not granted, guide the user to enable them:

Peekaboo requires the following macOS permissions:
- Screen Recording: For capturing UI screenshots
- Accessibility: For controlling UI elements

System Settings → Privacy & Security → Screen Recording/Accessibility → Add Terminal app

Then verify:

peekaboo permissions grant

3. Verify Configuration

peekaboo list apps

Quick Start

# List running applications
peekaboo list apps

# Capture current window UI with element annotations
peekaboo see --annotate --path /tmp/ui.png

# Click specific element (ID from see command)
peekaboo click --on elem_42

# Type text
peekaboo type "Hello World" --return

Core Commands

UI Capture & Analysis

# Capture UI element map (recommended before click/type)
peekaboo see --json --annotate --path /tmp/ui.png

# Target specific app/window
peekaboo see --app "Safari" --window-title "GitHub"

# Capture menubar popovers
peekaboo see --menubar

# Capture entire screen
peekaboo see --mode screen

Element Interaction

# Click element by ID
peekaboo click --on elem_42
peekaboo click "Submit" --wait-for 8000

# Coordinate-based click
peekaboo click --coords 100,200

# Double-click / Right-click
peekaboo click --on elem_42 --double
peekaboo click --coords 100,200 --right

# Type text
peekaboo type "user@example.com" --return
peekaboo type --clear "new text"  # Clear field first

# Key presses and hotkeys
peekaboo press return
peekaboo hotkey "cmd,w"   # Cmd+W

App Management

# Launch app
peekaboo app launch "Safari"
peekaboo app launch "Xcode" --open ~/Projects/MyApp.xcodeproj

# Quit app
peekaboo app quit --app "Safari"
peekaboo app quit --all --except "Finder,Terminal"

# Switch focus
peekaboo app switch --to Safari --verify

Window Management

# List windows
peekaboo list windows --app "Safari" --include-details bounds,ids

# Move/Resize window
peekaboo window move --app Safari -x 100 -y 100
peekaboo window resize --app Safari -w 1200 --height 800

# Focus/Close/Minimize/Maximize
peekaboo window focus --app Terminal --space-switch
peekaboo window close --app Safari

Menu Operations

# Click menu item
peekaboo menu click --app Safari --path "File,New Tab"

# List menubar status items
peekaboo list menubar

Scroll & Drag

# Scroll
peekaboo scroll --direction down --amount 3

# Drag
peekaboo drag --from 100,100 --to 300,300

# Move mouse
peekaboo move --coords 500,500

Common Workflows

Form Filling

# 1. Capture UI to get element IDs
peekaboo see --json --annotate --path /tmp/form.png

# 2. Click input field and type
peekaboo click --on elem_10
peekaboo type "username" --tab
peekaboo type "password" --return

App Automation

# 1. Launch app
peekaboo app launch "Safari" --wait-until-ready

# 2. Wait and perform actions
peekaboo sleep 2
peekaboo hotkey "cmd,l"  # Focus address bar
peekaboo type "https://github.com" --return

Output Format

Most commands support --json output:

peekaboo see --json | jq '.data.ui_elements[] | {id, label, role}'
peekaboo list apps --json | jq '.data[] | select(.frontmost == true)'

Troubleshooting

Permission Errors

peekaboo permissions status
peekaboo permissions grant

Element Not Found

  1. Re-capture UI: peekaboo see --json
  2. Use --wait-for to increase wait time
  3. Use --coords for coordinate-based targeting

Focus Issues

  1. Use --space-switch for cross-Space windows
  2. Use peekaboo app switch --to <app> --verify to confirm focus
  3. Use --no-auto-focus when already focused manually

Detailed Documentation

Comments

Loading comments...