Security audit
Security checks for vulnerabilities and agentic risk
The skill does what it says by automating an X11 desktop, but that gives an agent broad screen-capture and keyboard/mouse control with only minimal safety boundaries.
Review this carefully before installing. It is not evidence of malware, but it gives an agent the ability to view your screen, type, click, focus windows, and open URLs in a real X11 session. Use it only in a trusted, isolated desktop session where visible private data, credentials, and destructive applications are not exposed.
def run(ctx: Ctx, cmd, check=True, capture=False):
env = os.environ.copy()
env["DISPLAY"] = ctx.display
env["XAUTHORITY"] = ctx.xauthority
if capture:Ubuntu/Debian: ```bash sudo apt-get update sudo apt-get install -y xdotool scrot ```
Ubuntu/Debian: ```bash sudo apt-get update sudo apt-get install -y xdotool scrot ```
env["DISPLAY"] = ctx.display
env["XAUTHORITY"] = ctx.xauthority
if capture:
return subprocess.run(cmd, env=env, check=check, text=True, capture_output=True)
return subprocess.run(cmd, env=env, check=check)env["XAUTHORITY"] = ctx.xauthority
if capture:
return subprocess.run(cmd, env=env, check=check, text=True, capture_output=True)
return subprocess.run(cmd, env=env, check=check)
def require_bins(*bins):raise SystemExit(
"Missing required command(s): "
+ ", ".join(missing)
+ "\nInstall (Debian/Ubuntu): sudo apt-get install -y "
+ " ".join(missing)
)No suspicious patterns detected.