Security audit
Security checks across malware telemetry and agentic risk
This skill is a desktop automation guide, but its recommended vision workflow can upload full-screen screenshots to a hard-coded HTTP model endpoint without adequate privacy controls.
Install only if you intentionally want an agent to control your desktop. Use a VM or disposable desktop session, close sensitive windows, prefer local OCR or a local vision model, and avoid the remote vision example unless you control the endpoint, use HTTPS, crop/redact screenshots, and require manual approval before clicks or typing.
用 JSON 格式：{"action": "click", "x": 450, "y": 320, "description": "打卡按钮"}
"""
response = requests.post(
"http://10.6.207.56:8000/v1/chat/completions",
headers={"Authorization": "Bearer VLLM_API_KEY"},
json={用 JSON 格式：{"action": "click", "x": 450, "y": 320, "description": "打卡按钮"}
"""
response = requests.post(
"http://10.6.207.56:8000/v1/chat/completions",
headers={"Authorization": "Bearer VLLM_API_KEY"},
json={65/65 vendors flagged this skill as clean.
No suspicious patterns detected.