Handsfree Windows Control

• Outcome: Review
• Latest audit: May 28, 2026 at 4:40 AM UTC
• Version:
  1.3.0

Overview

This skill is transparent about powerful Windows and browser automation, but it installs mutable external code and reuses persistent browser sessions, so users should review it carefully before installing.

Install only if you are comfortable with an agent controlling local Windows apps and websites. Review or pin the external handsfree-windows repository before setup, prefer test accounts or dedicated browser profiles, delete ~/.handsfree-windows/browser-profiles when done with sensitive work, and require explicit confirmation before any send, delete, purchase, posting, account, or business-data action.

SkillSpector

By NVIDIA

Vulnerability Patterns

• Trigger Abuse: Overly Broad Trigger, Shadow Command Trigger, Keyword Baiting Trigger
• Behavioral AST: exec() Call, eval() Call, Dynamic Import
• Prompt Injection: Instruction Override, Hidden Instructions, Exfiltration Commands
• Data Exfiltration: External Transmission, Env Variable Harvesting, File System Enumeration
• Privilege Escalation: Excessive Permissions, Sudo/Root Execution, Credential Access

Findings (3)

subprocess module call

Medium

• Category: Dangerous Code Execution

Content

def run(cmd: list[str], cwd: Path | None = None, desc: str = "") -> int:
    print(f"\n>>> {desc or ' '.join(cmd)}")
    result = subprocess.run(cmd, cwd=str(cwd) if cwd else None)
    if result.returncode != 0:
        print(f"[ERROR] Command failed (exit {result.returncode}): {' '.join(cmd)}")
    return result.returncode

• Confidence: 95% confidence
• Finding: result = subprocess.run(cmd, cwd=str(cwd) if cwd else None)

Vague Triggers

Medium

• Confidence: 83% confidence
• Finding: The invocation description is broad enough to match generic automation or testing requests, which could cause the skill to be selected in contexts where shell-based setup and powerful desktop/browser control were not expected. Because this skill can launch apps, inspect UI, interact with websites, and replay macros, overbroad routing raises the risk of unnecessary privilege use and accidental execution of sensitive actions. The context makes this more concerning because the skill bridges both desktop and browser automation on Windows.

Missing User Warnings

Medium

• Confidence: 90% confidence
• Finding: Although the skill mentions on-disk browser profile paths and notes they contain cookies and login sessions, the description/invocation guidance does not prominently warn users before browser automation begins that authentication state persists across sessions. This can lead to unintentional reuse or exposure of logged-in sessions, especially on shared machines or when multiple tasks use the same persistent profile. In a browser automation skill, persistent auth state materially changes the security posture.

VirusTotal

64/64 vendors flagged this skill as clean.