Skill audit report

native_window_control Audit report.

When the user needs to operate an already-open native desktop app window (not a browser): list windows, get control tree, click buttons/tabs, or type text into controls. Windows only; requires Python and pywinauto (pip install pywinauto). | 操作已打开的原生桌面窗口(非浏览器):列举窗口、控件树、点击或输入;仅 Windows,需 pywinauto。

EXPERIMENTAL · REVIEWNeeds reviewGenerated Nov 8, 2026Heuristic metadata audit
73
Audit
66
Trust
65
Quality
72
Security
88
Maintain
92
Install

OpenAgentSkill Trust Score

66
Manual review

OpenAgentSkill Trust Score

The Trust Score helps an agent decide whether a skill is safe enough to shortlist before installation.

GitHub adoption

INFO

62

121 GitHub stars

Stars/forks activity

WARN

57

121 stars, 33 forks; issue activity unavailable in current metadata

Recent maintenance

PASS

88

3mo since push

License clarity

PASS

86

Apache-2.0

README/SKILL.md completeness

PASS

86

Metadata includes enough usage and workflow context

Dependency/runtime risk

WARN

54

credential or environment access, external package install surface

Install availability

PASS

92

npx skills add hyqibot/token-free-openclaw --skill native_window_control

Install command safety

INFO

68

credential-bearing install command, standard package or runtime install path

Permission surface

WARN

60

secrets or environment access, network or browser access

Repository evidence

PASS

86

https://github.com/hyqibot/token-free-openclaw/tree/main/copaw/agents/skills/native_window_control

Review status

INFO

66

AI review data available

Agent Proven outcomes

INFO

54

No agent outcome data yet

Checks

Install and adoption review

5 Passed · 14 Needs review

Install path

92

PASS

npx skills add hyqibot/token-free-openclaw --skill native_window_control

Repository

88

PASS

https://github.com/hyqibot/token-free-openclaw/tree/main/copaw/agents/skills/native_window_control

License

86

PASS

Apache-2.0

Maintenance

88

PASS

3mo since push

AI review

55

CHECK

The script excerpt is truncated; full error handling and edge cases (e.g., window not found, invalid ref) are not fully visible, but the provided code appears to handle basic errors.

README/SKILL.md completeness

86

PASS

Usable description available

Dependency risk

54

FIX

credential or environment access, external package install surface

Install command safety

68

CHECK

credential-bearing install command, standard package or runtime install path

Permission surface

60

CHECK

secrets or environment access, network or browser access

Stars/forks activity

57

FIX

121 stars, 33 forks; issue activity unavailable in current metadata

Adoption

68

INFO

121 GitHub stars

Warnings

  • Dependency or permission surface needs review
  • Permission surface may require sandboxing
  • The script excerpt is truncated; full error handling and edge cases (e.g., window not found, invalid ref) are not fully visible, but the provided code appears to handle basic errors.
  • Window title matching is substring-based and first-match, which could lead to unintended control if multiple windows share similar titles; the skill notes this but could be more explicit about disambiguation.
  • Quality score needs review
  • Permission surface needs review: secrets or environment access, network or browser access
  • Stars/forks activity: 121 stars, 33 forks; issue activity unavailable in current metadata
  • Dependency/runtime risk: credential or environment access, external package install surface
  • Permission surface: secrets or environment access, network or browser access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Compare nearby options

Related skills to audit next