Lightcone Session

Manual step-by-step computer control via Lightcone sessions. Activate when user needs fine-grained browser or desktop automation, multi-step workflows, login...

Security Scan

The skill's requirements and runtime instructions match its stated purpose (remote/manual control of cloud computers) and request only a single API key; nothing appears incoherent or disproportionate.

Purpose & Capability

Name/description (manual step-by-step control of a cloud computer) align with the declared requirement (one API key) and the instructions (create session, send UI actions, close). The TZAFON_API_KEY is consistent with a single third-party service API credential.

Instruction Scope

SKILL.md stays within the skill's purpose (create sessions, send clicks/types/scrolls, screenshots, extract HTML, run debug shell commands inside the cloud computer). Note: the 'debug' action (run shell command) and 'html' extraction can access and return sensitive data from the remote machine or visited pages — this is expected for a full-featured remote desktop/browser automation tool but is a privacy/security consideration for users.

Install Mechanism

Instruction-only skill with no install steps or downloaded code; minimal disk/system footprint and lowest install risk.

Credentials

Only one required environment variable (TZAFON_API_KEY) is declared and used. That is proportional to a remote/cloud session service. The skill does not request unrelated credentials or config paths.

Persistence & Privilege

always is false; skill is user-invocable and can be autonomously invoked by the agent (platform default). It does not request system-wide persistence or modify other skills' configs.

Assessment

This skill appears internally consistent, but the API key you provide grants the skill the ability to create cloud machines that can browse sites, take screenshots, extract page HTML, and run shell commands inside the remote machine. Before installing, confirm you trust the Lightcone/Tzafon provider and understand what the TZAFON_API_KEY can do. Do not use your primary/personal accounts or sensitive credentials for testing; prefer ephemeral or least-privilege keys. Review the provider's docs and privacy policy, rotate or revoke the key if you stop using the skill, and avoid sending highly sensitive data through sessions that the provider controls.

Lightcone Session Control

Three tools for manual step-by-step control of a cloud computer. Use when you need precise multi-step interaction with a website or desktop application.

For simple "go do this" tasks, prefer lightcone-browse (the /lightcone-browse command) instead.

Tools

Tool	Purpose
lightcone_session_create	Create a cloud computer (browser or desktop)
lightcone_session_action	Send actions (click, type, scroll, screenshot, etc.)
lightcone_session_close	Shut down the computer

Workflow Pattern

1. lightcone_session_create  → get session ID + initial screenshot
2. lightcone_session_action  → navigate, click, type, screenshot (repeat)
3. lightcone_session_close   → shut down

lightcone_session_create

Parameter	Required	Description
url	No	URL to navigate to immediately
kind	No	"browser" (default) or "desktop"

Returns: session ID (e.g., lc-a1b2c3d4) + screenshot of initial state.

lightcone_session_action

Parameter	Required	Description
sessionId	Yes	Session ID from create
action	Yes	One of the actions below
url	For navigate	Target URL
x, y	For click/scroll	Pixel coordinates
text	For type	Text to enter
keys	For hotkey	Comma-separated keys, e.g. "Control,c"
dx, dy	For scroll	Scroll deltas
seconds	For wait	Duration in seconds
command	For debug	Shell command to run

Actions

Action	Returns	Use for
screenshot	Screenshot	See current state
navigate	Screenshot	Go to a URL
click	Screenshot	Click at (x, y)
doubleClick	Screenshot	Double-click at (x, y)
rightClick	Screenshot	Right-click for context menu
type	Screenshot	Enter text at cursor
hotkey	Screenshot	Keyboard shortcut (e.g., Enter, Tab, Control+a)
scroll	Screenshot	Scroll at position
html	Page HTML	Extract page source
wait	Screenshot	Pause before next action
debug	Command output	Run shell command in the computer

Example: Login and extract data

Step 1: Create a cloud computer at the login page
  lightcone_session_create { url: "https://app.example.com/login" }

Step 2: Type username (click the email field first)
  lightcone_session_action { sessionId: "lc-...", action: "click", x: 640, y: 300 }
  lightcone_session_action { sessionId: "lc-...", action: "type", text: "[e-mail]" }

Step 3: Type password
  lightcone_session_action { sessionId: "lc-...", action: "hotkey", keys: "Tab" }
  lightcone_session_action { sessionId: "lc-...", action: "type", text: "password123" }

Step 4: Submit
  lightcone_session_action { sessionId: "lc-...", action: "hotkey", keys: "Return" }
  lightcone_session_action { sessionId: "lc-...", action: "wait", seconds: 3 }

Step 5: Screenshot to verify login succeeded
  lightcone_session_action { sessionId: "lc-...", action: "screenshot" }

Step 6: Extract page content
  lightcone_session_action { sessionId: "lc-...", action: "html" }

Step 7: Shut down
  lightcone_session_close { sessionId: "lc-..." }

Tips

• Always take a screenshot after navigation to see the current state before clicking
• Use coordinates from the screenshot to target clicks accurately
• Wait 2-3 seconds after navigation or form submission for pages to load
• Use html action to extract structured data from the page
• Always close sessions when done to free resources