web-infra-dev/midscene-skills1.3k installs
computer-automation
A reusable agent skill published by web-infra-dev/midscene-skills.
How do I install this agent skill?
npx skills add https://github.com/web-infra-dev/midscene-skills --skill computer-automationIs this agent skill safe to install?
- Gen Agent Trust Hubfail
The skill facilitates desktop automation using Midscene.js but introduces a significant risk of command injection by passing unsanitized user natural language prompts directly into shell commands. It also performs remote code execution via the npm registry and captures desktop screenshots, which poses a risk of exposing sensitive information.
- Socketwarn
1 alert: gptAnomaly
- Snykwarn
Risk: MEDIUM · 1 issue
How can the creator link this skill?
Add the canonical catalog link to the repository README so users can inspect current installs and available audits. The publishing guide covers the complete discovery path.
<a href="https://skillzs.dev/skills/web-infra-dev/midscene-skills/computer-automation">View computer-automation on skillZs</a>