Clipboard

PassAudited by VirusTotal on May 12, 2026.

Overview

Type: OpenClaw Skill Name: clipboard Version: 1.0.0 The skill bundle provides functionality to interact with the system clipboard using `xclip`. All commands and installation instructions in `SKILL.md` are directly related to this stated purpose. While the `xclip -selection clipboard < /path/to/file.txt` command allows reading arbitrary file contents into the clipboard, this is a core capability of the skill and does not exhibit clear malicious intent, data exfiltration, or prompt injection attempts against the agent. The skill itself does not instruct the agent to access sensitive files or perform unauthorized actions.

Findings (0)

Artifact-based informational review of SKILL.md, metadata, install specs, static scan signals, and capability signals. ClawScan does not execute the skill or run runtime probes.

NoteHigh Confidence

ASI02: Tool Misuse and Exploitation

What this means

If invoked, whatever text is currently on the clipboard could appear in the agent conversation or related logs.

Why it was flagged

The skill explicitly enables reading the current system clipboard into the session. This is the intended function, but clipboard text may contain private data such as passwords, tokens, or personal notes.

Skill content

Output current clipboard contents:

```bash
xclip -selection clipboard -o
```

Recommendation

Use the paste/read command only when you intend to share the clipboard content, and clear the clipboard first if it may contain sensitive text.