Windows Desktop Automation CLI

• Analyzed: May 5, 2026, 4:26 PM
• Findings: 1
• Version: 0.6.0
• Hash: 8fe318cc9f669b2cb081b9f92911e5e9f334b4313ca15b9f89be2b4a4883df2c
• Source: palm
• External report: View on VirusTotal

Findings (1)

The bundle provides a comprehensive Windows desktop automation CLI with capabilities for window management, UI inspection, and input simulation. While the code is well-structured and includes security mitigations like output boundary markers (output_utils.py) to prevent prompt injection from UI content, it possesses high-risk capabilities such as reading the system clipboard (clipboard_driver.py) and capturing screenshots (windows_driver.py). These features are aligned with the stated purpose of desktop automation but represent a significant security surface for potential data exfiltration or unauthorized system control if the AI agent is misdirected.