Windows UI Automation

• Analyzed: May 14, 2026, 3:51 AM
• Findings: 1
• Version: 1.0.0
• Hash: af3d5dfe2c611c05bc4fa6f64445078ca9cfcd3eeab64f149e0fdd2d5e75fb72
• Source: palm
• External report: View on VirusTotal

Findings (1)

The skill bundle provides powerful Windows UI automation capabilities, including simulating arbitrary mouse movements, clicks, and keyboard input, as well as managing window states. While these actions align with the stated purpose of 'Windows UI Automation', they represent inherently high-risk behaviors. The `keyboard_control.ps1.txt` and `mouse_control.ps1.txt` scripts use `System.Windows.Forms.SendKeys` and direct `user32.dll` calls via `Add-Type` to achieve full control over the desktop UI. The `SKILL.md` also demonstrates the use of `WScript.Shell` for window activation. There is no evidence of intentional malicious activity like data exfiltration or persistence, but the extensive control over the user's desktop makes this skill highly susceptible to abuse if the agent is compromised or given ambiguous instructions, classifying it as suspicious due to its significant potential for harm.