100Critical
The skill manages credentials and uses UI interaction
Behavior Analysis
Description verified — behavior matches claim
Claims to do
Peekaboo: Peekaboo is a full macOS UI automation CLI: capture/inspect screens, target UI elements, drive input, and manage apps/windows/menus. Commands share a snapshot cache and support `--json`/`-j` for scripting. Run `peekaboo` or `peekaboo <cmd> --help` for flags; `peekaboo --version` prints build metadata. Tip: run via `polter peekaboo` to ensure fresh builds.
Actually does
The skill executes the `peekaboo` CLI tool to automate macOS UI. It captures screenshots, reads and writes clipboard data, lists system information (apps, windows, menus), and performs various UI interactions like clicks, typing, drags, and hotkeys. It can also manage applications, windows, system dialogs, and the Dock, and execute local `.peekaboo.json` scripts.
Skill Info
Namesteipete/peekaboo
Registryclawhub
Version1.0.0
PURLpkg:clawhub/steipete/peekaboo@1.0.0
Stars71
Downloads24,170
Installs1,256
Source
SHA-2567a87a01399f9...
SHA-1e2e9f3f0358a...
MD5d098190b27de...
TLSHa4c1f69a6558...
ssdeep96:Y54bcSERO...
Size5,753 bytes
Install
This skill has been flagged as potentially malicious. Review the findings below before installing.
ClawHubDocs
openclaw skills install steipete/peekabooAssessments (1)
AI Agent Traps ↗Credential Theft and Manipulationcriticalcredential theft
The `config` command explicitly manages 'credentials'. Combined with UI interaction capabilities (`type`, `paste`, `click`), an attacker could interact with login forms, password managers, or directly access/manipulate stored credentials.
100% confidenceline 22
`config`: init/show/edit/validate, providers, models, credentials `paste`: set clipboard -> paste -> restore `type`: text + control keys
Badge
Markdown
[](https://mondoo.com/ai-agent-security/skills/clawhub/steipete/peekaboo)HTML
<a href="https://mondoo.com/ai-agent-security/skills/clawhub/steipete/peekaboo"><img src="https://mondoo.com/ai-agent-security/api/badge/clawhub/steipete/peekaboo.svg" alt="Mondoo Skill Check" /></a>Image URL
https://mondoo.com/ai-agent-security/api/badge/clawhub/steipete/peekaboo.svgSecure your AI agents
Skills can read files, run commands, and access credentials. Mondoo helps organizations manage the security risks of AI agent skills across their entire fleet.
- Continuous scanning of skills across all registries
- Policy enforcement before skills reach your agents
- Integration with your existing security workflow