Announcing Beacon: Self-improving memory for coding agents
BeaconIntel
2.9K
← All skills
Skill

connect-chatcut-desktop

skill:openai/plugins#connect-chatcut-desktop

Install, open, connect, or repair ChatCut Desktop when the chatcut_desktop MCP tools are missing or unavailable. Do not use from a managed agent already running inside ChatCut Desktop, or when chatcut_desktop tools are already available.

SkillsMP
Verdict
Suspicious

Risky behavior the analysis could not rule out.

Analyzed Oct 27, 2026, 23:10 UTC at 0722921

Dispute security verdict

If you believe this verdict is incorrect, submit a dispute and we'll review it.

1
findings
high
highest severity
1
threat classes
5,479
files scanned
20/20
checks satisfied
0
package advisories

Why this verdict

  • suspicious: unverified finding skill:plugins/chatcut/skills/connect-chatcut-desktop:plugins/chatcut/skills/connect-chatcut-desktop/SKILL.md:40:PERSIST

Security findings 1

Persistence

highUnverifiedlow confidence

The skill instructs the agent to open ChatCut Desktop, which the text states automatically registers the chatcut_desktop MCP server and synchronizes editing skills into Codex, modifying the agent's tool configuration as a side effect of the declared connect flow.

plugins/chatcut/skills/connect-chatcut-desktop/SKILL.md:40
Open ChatCut Desktop. It registers `chatcut_desktop` and synchronizes its
vector:instruction

Open questions 1

What the analysis could not settle from the code alone.

Whether the api.chatcut.io download endpoints serve only the legitimate signed ChatCut Desktop binaries cannot be verified from the artifact; the URLs are fixed in text but not hash-pinned, so the download-and-install flow's integrity rests entirely on the vendor endpoint and code-signing checks described in the skill.
Supply chain
Refuted findings 2

Candidates the review stage examined and rejected, kept for transparency.

Code execution

criticalRefutedlow confidence

The skill instructs the agent to download the ChatCut Desktop artifact from api.chatcut.io into a temporary directory and execute the downloaded binary (opening the Windows installer, copying ChatCut.app to /Applications), an auto-run prerequisite installer whose payload is whatever the remote endpoint serves.

plugins/chatcut/skills/connect-chatcut-desktop/SKILL.md:37-39
open the downloaded installer and let the visible installer finish.
Why it was refuted

Executing the vendor installer is the declared install/repair core capability, performed under scoped host approval with a mandated user-handoff fallback, and the skill forbids bypassing signature/Gatekeeper or Authenticode warnings, so this is a vendor installer in install documentation, not an undeclared execution harm.

Supply chain

highRefutedlow confidence

The skill directs downloads of executable artifacts from unversioned latest endpoints on api.chatcut.io with no pinned release or checksum, so the code installed and run on the host depends entirely on what the mutable server returns at execution time.

plugins/chatcut/skills/connect-chatcut-desktop/SKILL.md:21-23
https://api.chatcut.io/desktop/download/macos
Why it was refuted

Downloading from the official api.chatcut.io endpoints is the skill's declared core capability (install ChatCut Desktop) with the URLs explicitly declared in the body, and integrity is enforced by mandatory vendor signature validation, so the unpinned-latest observation falls under the declared-core-capability / vendor-installer-in-install-docs carve-out.

Coverage gaps 14

Parts of the artifact the static analysis could not fully examine.

context:unanalyzable_binary binary content is only byte-scanned
plugins/codex-security/mcp/helpers.mjs.br.part-000
context:unanalyzable_binary macho content is only byte-scanned
plugins/codex-security/mcp/native/darwin-arm64/unix.node
context:unanalyzable_binary macho content is only byte-scanned
plugins/codex-security/mcp/native/darwin-x64/unix.node
context:unanalyzable_binary elf content is only byte-scanned
plugins/codex-security/mcp/native/linux-arm64-gnu/unix.node
context:unanalyzable_binary elf content is only byte-scanned
plugins/codex-security/mcp/native/linux-arm64-musl/unix.node
context:unanalyzable_binary elf content is only byte-scanned
plugins/codex-security/mcp/native/linux-x64-gnu/unix.node
context:unanalyzable_binary elf content is only byte-scanned
plugins/codex-security/mcp/native/linux-x64-musl/unix.node
context:unanalyzable_binary pe content is only byte-scanned
plugins/codex-security/mcp/native/win32-arm64/windows.node
context:unanalyzable_binary pe content is only byte-scanned
plugins/codex-security/mcp/native/win32-x64/windows.node
context:unanalyzable_binary binary content is only byte-scanned
plugins/codex-security/mcp/server.mjs.br.part-000
context:unanalyzable_binary binary content is only byte-scanned
plugins/codex-security/mcp/server.mjs.br.part-001
context:oversize archive member exceeds 8388608 bytes; truncated, no text
plugins/shopify/skills/shopify-admin/assets/admin_2026-04.json.gz!/admin_2026-04.json
context:decoded_views_exceeded 452 derived view(s) beyond the per-file view cap: decoded:charcode, decoded:rot13, decoded:unicode-escape
plugins/creative-production/mcp/server.bundle.mjs
context:bytes_unavailable yara-x: no bytes to scan
plugins/shopify/skills/shopify-admin/assets/admin_2026-04.json.gz!/admin_2026-04.json