Security audit
Security checks across malware telemetry and agentic risk
This is a powerful Windows desktop automation skill, but its local-only privacy claims conflict with code that can send prompts to remote LLM services.
Install only if you intentionally want an agent to control your Windows desktop, inspect screen/OCR/UIA content, use the clipboard, and optionally record or replay global input. Treat the zero-network claim as unreliable unless LLM_API_KEY and LLM_BASE_URL remain unset and you avoid helper scripts that download resources. Review generated scripts before running them and shut down the daemon when not needed.
def _safe_eval(expr):
"""Evaluate a condition expression in a restricted environment."""
try:
return bool(eval(expr, _SAFE_GLOBALS, _SAFE_LOCALS))
except Exception as e:
raise RuntimeError(f"Condition evaluation failed: '{expr}'. {e}")for i in range(3): # 3 times safe
r = send_request("ping", {})
old_pid = r.get("result",{}).get("data",{}).get("pid")
subprocess.run(["taskkill", "/F", "/PID", str(old_pid)], capture_output=True)
time.sleep(2)
try:
r = send_request("ping", {})import subprocess
# Kill it
kill = subprocess.run(["taskkill", "/F", "/PID", str(old_pid)], capture_output=True, text=True)
if kill.returncode == 0 or "SUCCESS" in kill.stdout:
print(f" 已终止 PID {old_pid}")# 5. Write pipe name and PID for the client to discover
lifecycle.write_pid_file()
with open(PIPE_INFO_FILE, "w") as f:
f.write(pipe_name)
print(f"desktop-control daemon ready on {pipe_name} [pid {os.getpid()}]")_ensure_cache_dir()
path = os.path.join(SCRIPT_CACHE, _cache_key(prompt))
try:
with open(path, "w", encoding="utf-8") as f:
json.dump(script, f, ensure_ascii=False, indent=2)
logger.info(f"Script cached at: {path}")
except IOError as e:}
try:
resp = requests.post(url, headers=headers, json=payload, timeout=60)
resp.raise_for_status()
data = resp.json()
except requests.exceptions.Timeout:def write_pid_file():
with open(PID_FILE, "w") as f:
f.write(str(os.getpid()))"params": safe_params,
"success": success,
}
with open(LOG_FILE, "a", encoding="utf-8") as f:
f.write(json.dumps(entry, ensure_ascii=False) + "\n")
except Exception:
pass # Logging failure should never crash the daemonVirusTotal findings are pending for this skill version.
Detected: suspicious.dynamic_code_execution