Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The skill enables arbitrary GUI interaction, shell commands, and host access, but the documentation provides only a one-time consent gate and no broader safety guidance.
• There is no explicit warning about prompt injection or malicious on-screen content steering the agent's clicks, typed text, or shell commands.
• Trajectory sharing uploads session data without cautioning users to review screenshots or avoid exposing secrets and sensitive information.
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• Dependency/runtime risk: command execution surface, external package install surface
• Permission surface: shell or command execution, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The skill enables arbitrary GUI interaction, shell commands, and host access, but the documentation provides only a one-time consent gate and no broader safety guidance.
• There is no explicit warning about prompt injection or malicious on-screen content steering the agent's clicks, typed text, or shell commands.
• Trajectory sharing uploads session data without cautioning users to review screenshots or avoid exposing secrets and sensitive information.
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• Dependency/runtime risk: command execution surface, external package install surface
• Permission surface: shell or command execution, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The skill enables arbitrary GUI interaction, shell commands, and host access, but the documentation provides only a one-time consent gate and no broader safety guidance.
• There is no explicit warning about prompt injection or malicious on-screen content steering the agent's clicks, typed text, or shell commands.
• Trajectory sharing uploads session data without cautioning users to review screenshots or avoid exposing secrets and sensitive information.
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• Dependency/runtime risk: command execution surface, external package install surface
• Permission surface: shell or command execution, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.

Warnings

• Dependency or permission surface needs review
• Permission surface may require sandboxing
• The skill enables arbitrary GUI interaction, shell commands, and host access, but the documentation provides only a one-time consent gate and no broader safety guidance.
• There is no explicit warning about prompt injection or malicious on-screen content steering the agent's clicks, typed text, or shell commands.
• Trajectory sharing uploads session data without cautioning users to review screenshots or avoid exposing secrets and sensitive information.
• Quality score needs review
• Permission surface needs review: shell or command execution, filesystem or document access
• Dependency/runtime risk: command execution surface, external package install surface
• Permission surface: shell or command execution, filesystem or document access

Method

This report combines public metadata, AI review output, repository freshness, install readiness, OpenAgentSkill events, quality scoring, trust checks, and the agent safety gate. It is not a full source-code security review.