Back to skill
Skillv1.0.0
VirusTotal security
Desktop Automation · External malware reputation and Code Insight signals for this exact artifact hash.
Scanner verdict
SuspiciousApr 30, 2026, 5:40 AM
- Hash
- ef2cbb852e3cfc69abf6709a8d0f4340dcebf81478460b266af6758724ef686c
- Source
- palm
- Verdict
- suspicious
- Code Insight
- Type: OpenClaw Skill Name: desktop-automation Version: 1.0.0 The skill bundle provides instructions and scripts to install a 'CUA computer server' that grants an AI agent full control over the host desktop, including screenshots, key injection, and application launching. It explicitly includes scripts for establishing persistence via systemd, launchd, and Windows Task Scheduler (SKILL.md). While these capabilities are aligned with the stated purpose of desktop automation, the inherent risk of granting an AI unrestricted UI and command execution access to the host machine, combined with the setup of background services, constitutes high-risk behavior.
- External report
- View on VirusTotal
