Security audit
Security checks across malware telemetry and agentic risk
This skill does what it advertises, but it gives an agent broad live Windows desktop control with weak safety boundaries.
Install only if you intentionally want an agent to see and operate your active Windows desktop. Close sensitive windows first, keep the service bound to localhost, protect or delete the token and temp screenshots, verify every action, and stop the server when finished.
def install():
cmd = f"& '{PY}' -m pip install {' '.join(DEPS)}"
result = subprocess.run([POWERSHELL, "-Command", cmd], capture_output=True, text=True, timeout=120)
print(result.stdout)
if result.returncode != 0:
print(f"错误: {result.stderr}")f"-ArgumentList '{win_server}' "
f"-WindowStyle Hidden"
)
subprocess.run([POWERSHELL, "-Command", cmd], capture_output=True, timeout=15)
for _ in range(timeout // 2):
time.sleep(2)if not is_running():
return True
# 强制关闭
subprocess.run(
[POWERSHELL, "-Command",
"Get-Process python -ErrorAction SilentlyContinue | Where-Object {$_.CommandLine -like '*server.py*'} | Stop-Process -Force"],
capture_output=True, timeout=10fastapi uvicorn mss pyautogui
fastapi uvicorn mss pyautogui pillow
fastapi uvicorn mss pyautogui pillow
fastapi uvicorn mss pyautogui pillow
uvicorn mss pyautogui pillow
66/66 vendors flagged this skill as clean.
No suspicious patterns detected.