computer-use
Warn
Audited by Socket on Mar 29, 2026
1 alert found:
AnomalyAnomalyscripts/scroll.swift
LOWAnomalyLOW
scripts/scroll.swift
This fragment is not obviously malicious in the sense of exfiltration or backdoor logic, but it does perform system-level HID event injection (mouse movement and scrolling) based on user-supplied arguments. That behavior can be abused to automate or influence the UI, so it should be reviewed in the context of how/where it is invoked and what macOS permissions it requires.
Confidence: 62%Severity: 50%
Audit Metadata