Security audit
Security checks for vulnerabilities and agentic risk
This desktop automation skill is mostly coherent, but it gives broad control over the local desktop and unrestricted file read/write access without clear safeguards.
Install only if you intentionally want an agent to control your active desktop, capture screenshots, type into applications, open or close apps, and read or write local files as your user. Prefer using it in a VM or test account, avoid sensitive windows and secrets while it is active, and review automation scripts before running them.
```bash # Ubuntu/Debian sudo apt-get install python3-pil python3-xlib scrot # macOS brew install pillow
x, y, w, h = region
cmd = ['screencapture', '-x', '-R', f'{x},{y},{w},{h}', temp_path]
subprocess.run(cmd, check=True)
data = Path(temp_path).read_bytes()
Path(temp_path).unlink()
return datacmd = ['gnome-screenshot', '-f', temp_path]
try:
subprocess.run(cmd, check=True, capture_output=True)
except (subprocess.CalledProcessError, FileNotFoundError):
# Fallback to scrot
if region:cmd = ['gnome-screenshot', '-f', temp_path]
try:
subprocess.run(cmd, check=True, capture_output=True)
except (subprocess.CalledProcessError, FileNotFoundError):
# Fallback to scrot
if region:def mouse_move(self, x: int, y: int) -> None:
"""Move mouse to coordinates"""
if self.platform == 'macos':
subprocess.run(['cliclick', 'm:', f'{x},{y}'], check=False)
elif self.platform == 'linux':
subprocess.run(['xdotool', 'mousemove', str(x), str(y)], check=False)
else:if self.platform == 'macos':
subprocess.run(['cliclick', 'm:', f'{x},{y}'], check=False)
elif self.platform == 'linux':
subprocess.run(['xdotool', 'mousemove', str(x), str(y)], check=False)
else:
# Windows - would need pyautogui or similar
passif self.platform == 'macos':
btn = 'cl' if button == 'left' else 'cr'
for _ in range(clicks):
subprocess.run(['cliclick', btn], check=False)
elif self.platform == 'linux':
btn_map = {'left': '1', 'middle': '2', 'right': '3'}
btn = btn_map.get(button, '1')btn_map = {'left': '1', 'middle': '2', 'right': '3'}
btn = btn_map.get(button, '1')
for _ in range(clicks):
subprocess.run(['xdotool', 'click', btn], check=False)
def mouse_drag(self, from_x: int, from_y: int, to_x: int, to_y: int,
button: str = "left") -> None:btn_map = {'left': '1', 'middle': '2', 'right': '3'}
btn = btn_map.get(button, '1')
for _ in range(clicks):
subprocess.run(['xdotool', 'click', btn], check=False)
def mouse_drag(self, from_x: int, from_y: int, to_x: int, to_y: int,
button: str = "left") -> None:button: str = "left") -> None:
"""Drag mouse"""
if self.platform == 'linux':
subprocess.run(['xdotool', 'mousemove', str(from_x), str(from_y),
'mousedown', '1', 'mousemove', str(to_x), str(to_y),
'mouseup', '1'], check=False)def mouse_position(self) -> Tuple[int, int]:
"""Get mouse position"""
if self.platform == 'linux':
result = subprocess.run(['xdotool', 'getmouselocation'],
capture_output=True, text=True, check=False)
# Parse "x:123 y:456 screen:0 window:789"
output = result.stdout.strip()def type_text(self, text: str, delay: Optional[float] = None) -> None:
"""Type text"""
if self.platform == 'macos':
subprocess.run(['cliclick', 't:', text], check=False)
elif self.platform == 'linux':
subprocess.run(['xdotool', 'type', text], check=False)if self.platform == 'macos':
subprocess.run(['cliclick', 't:', text], check=False)
elif self.platform == 'linux':
subprocess.run(['xdotool', 'type', text], check=False)
def key_press(self, keys: List[str]) -> None:
"""Press key combination"""if self.platform == 'linux':
key_str = '+'.join(keys)
subprocess.run(['xdotool', 'key', key_str], check=False)
elif self.platform == 'macos':
# Convert to cliclick format
key_map = {'tab': 'tab'
}
key_str = ','.join([key_map.get(k, k) for k in keys])
subprocess.run(['cliclick', 'kp:' + key_str], check=False)
def key_down(self, key: str) -> None:
"""Hold key down"""No suspicious patterns detected.