Security audit
Open Computer Use MCP
Security checks across malware telemetry and agentic risk
Overview
This skill is a small instruction-only integration for a local, policy-gated macOS computer-use MCP runtime, with its powerful desktop access clearly disclosed and bounded by user-controlled policy.
Install only if you intend to let an agent control selected macOS apps through the open-computer-use MCP runtime. Review the local bundle-ID policy rules, keep the runtime deny-by-default, and verify the external @0xcjl/open-computer-use package before relying on it.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
64/64 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.