Clipboard
AdvisoryAudited by Static analysis on Apr 30, 2026.
Overview
No suspicious patterns detected.
Findings (0)
Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.
What this means
If invoked, whatever text is currently on the clipboard could appear in the agent conversation or related logs.
Why it was flagged
The skill explicitly enables reading the current system clipboard into the session. This is the intended function, but clipboard text may contain private data such as passwords, tokens, or personal notes.
Skill content
Output current clipboard contents: ```bash xclip -selection clipboard -o ```
Recommendation
Use the paste/read command only when you intend to share the clipboard content, and clear the clipboard first if it may contain sensitive text.
