Security audit
Security checks across malware telemetry and agentic risk
The skill appears to disclose its desktop-control purpose, but it also gives the agent unrestricted local Windows command execution that users should review carefully before installing.
Install only if you are comfortable giving the skill shell-level control of your Windows machine and browser session. Use it in a low-risk environment, avoid running it on sensitive accounts or private data unless necessary, and closely review any workflow that could be influenced by webpage or document content.
## Safety notes - `windows run` and `windows ps` execute arbitrary commands. Treat them like a shell. - Screenshots and click events affect the user's actual desktop. - `windows activate` will switch the foreground window out from under the user. - `playwright-cli` over CDP sees and acts on whatever's open in the connected
VirusTotal findings are pending for this skill version.
No suspicious patterns detected.
