computer-use-agents
Pass
Audited by Gen Agent Trust Hub on Sep 17, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill implements desktop and shell automation capabilities.
- The
ComputerUseAgentclass usespyautoguifor mouse clicks, typing, and key presses in the perception-reasoning-action loop inSKILL.md. - The
AnthropicComputerUseimplementation includes abashtool usingsubprocess.runto execute system commands such asscrotfor screen capture inSKILL.md. - [INDIRECT_PROMPT_INJECTION]: The skill defines vision-based agents that process screen content, creating a surface for instructions embedded in visual data to influence agent behavior.
- Ingestion points: Screen state is captured via
pyautogui.screenshot()and thescrotcommand line tool inSKILL.md. - Boundary markers: The provided implementation snippets do not include explicit input validation or boundary delimiters for processed visual data.
- Capability inventory: The agent has broad system access via
pyautogui(UI control) and abashtool (shell access) inSKILL.md. - Sanitization: No specific sanitization or filtering is applied to the vision-based inputs or command outputs in the example code.
- [EXTERNAL_DOWNLOADS]: The provided Dockerfile includes patterns for installing software from official package registries.
- The configuration installs system packages via
apt-getand Python packages viapip3 installfrom the requirements file inSKILL.md.
Audit Metadata