ClawHub
Back to skill

Security audit

PeekabooV3 open claw的桌面自动化skill

Security checks across malware telemetry and agentic risk

Overview

This macOS automation skill is coherent, but it can automatically install a third-party desktop-control tool and then use powerful screen and accessibility permissions.

Review this before installing. Use it only when you intentionally want native Mac desktop automation, require the agent to ask before running the Homebrew install, verify the Peekaboo tap/package source, and grant Screen Recording or Accessibility only if you are comfortable with the tool seeing and controlling your desktop.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Trigger AbuseOverly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
Findings (3)

Vague Triggers

Medium
Confidence
90% confidence
Finding
The trigger description is extremely broad and can capture many ordinary macOS help requests, causing this high-impact desktop automation skill to activate in situations where a lower-risk skill or normal conversational handling would be more appropriate. Because the skill can inspect and control native apps and local UI, over-triggering increases the chance of unintended local actions, privacy exposure, or installation prompts in contexts where the user did not clearly request desktop automation.

Missing User Warnings

Medium
Confidence
96% confidence
Finding
The skill explicitly instructs the agent to proactively install Peekaboo without warning or confirmation if it is missing. Installing software changes the user's system state and may introduce new privileges, binaries, background behavior, or trust dependencies; doing so automatically is especially risky here because the installed tool enables broad local GUI automation over native apps.

Missing User Warnings

Medium
Confidence
95% confidence
Finding
The script automatically installs software from a third-party Homebrew tap when the `peekaboo` binary is missing, without any in-script user confirmation, integrity verification, or trust prompt. In this skill's context, that is more dangerous because the metadata explicitly says to proactively install Peekaboo and continue, which normalizes silent local system modification and execution of externally sourced code on the user's Mac.

VirusTotal

63/63 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.