Security audit

Peekaboo

Security checks for vulnerabilities and agentic risk

Overview

This skill is a coherent macOS automation helper, but it grants broad screen, clipboard, dialog, and input-control abilities with limited safety guidance.

Install only if you trust the Peekaboo package source and are comfortable granting macOS Screen Recording and Accessibility permissions. Avoid using command-line examples with real passwords or other secrets, and review each automation action before letting an agent click, type, read the clipboard, or interact with dialogs on your behalf.

A.I.G

Vulnerability Patterns

Insecure DependenciesIntroduces malicious components through unsafe dependency sources
Insecure Skill Coding PracticesFinds exploitable flaws such as hardcoded secrets or command injection
Skill Instruction HijackingAlters the agent's session goals or safety constraints when the skill loads
Agent Memory PoisoningWrites attacker-controlled rules into memory that affect later sessions
Remote Payload Retrieval and ExecutionFetches external code whose behavior can change after review

Findings (2)

T08 · Insecure Dependencies

Warning

Location: SKILL.md:5
Finding: Unpinned Third-Party Homebrew Dependency
Content: View full analysis
Remediation: View remediation

T09 · Insecure Skill Coding Practices

Warning

Location: SKILL.md:93
Finding: Password Exposed Through Command-Line Arguments
Content: View full analysis
Remediation: View remediation

SkillSpector

Vulnerability Patterns

Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep

Findings (1)

Missing User Warnings

Medium

Category: Not specified by scanner
Confidence: 89% confidence
Finding: This skill advertises broad macOS UI automation, screen capture, clipboard access, dialog interaction, app/window control, and typing/click automation without any prominent warning about privacy, sensitive data exposure, or the risk of destructive actions. In an agent setting, those capabilities can be chained to read on-screen secrets, manipulate user applications, or trigger unintended system actions, so the omission of explicit guardrails is a real safety weakness even if the documentation appears straightforward.
Content: No source excerpt is available for this finding.

Static analysis

No suspicious patterns detected.