ClawHub
Back to skill

Security audit

Computer Use Kylinos

Security checks across malware telemetry and agentic risk

Overview

This skill provides disclosed KylinOS desktop automation helpers, and the reviewed artifacts do not show hidden collection, persistence, exfiltration, or unrelated privileged behavior.

Install only if you want an agent to control the KylinOS desktop. It can see window names, capture window images, move the pointer, type, click, double-click, drag, and move windows, so use it in sessions where those actions are acceptable and avoid sensitive apps unless the task requires them.

SkillSpector

By NVIDIA
Vulnerability Patterns
  • Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
  • Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
  • Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
  • Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
  • Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
Findings (3)

Missing User Warnings

Medium
Confidence
88% confidence
Finding
The script performs a real mouse click through wlcctrl with no interactive confirmation, safety interlock, or validation that the resolved coordinates still target the intended UI element. In a GUI-automation skill, that can cause unintended actions such as activating destructive buttons, dismissing prompts, or interacting with the wrong window if geometry, scale, or focus assumptions are wrong.

Missing User Warnings

Medium
Confidence
82% confidence
Finding
The script enumerates visible window titles, the active window, its geometry, and current mouse location without any notice, consent check, or scope limitation. In a GUI-automation skill, this can expose sensitive contextual information such as document names, chat subjects, or what application the user is interacting with, especially if output is logged or forwarded to another component.

Missing User Warnings

Medium
Confidence
92% confidence
Finding
This script performs real mouse movement and clicking on the active desktop without any user confirmation, dry-run mode, safety interlock, or validation that the target window is the intended one. In a GUI automation skill, that can cause unintended interaction with sensitive applications or dialogs if window IDs are stale, incorrect, or attacker-influenced, leading to accidental approval, data modification, or disruptive input injection.

VirusTotal

54/54 vendors flagged this skill as clean.

View on VirusTotal

Static analysis

No suspicious patterns detected.