desktop-mouse
Pass
Audited by Gen Agent Trust Hub on Mar 24, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill executes a local script
molt-mousewhich acts as a wrapper for theydotoolutility to perform mouse movements and clicks. - Input Validation: The script uses regular expressions (
^-?[0-9]+$) to ensure that coordinates and movement deltas are strictly numeric. - Safety Constraints: It implements a
clamp_intfunction to limit the maximum movement distance to a configurable value (default 2000 pixels), preventing uncontrolled or extreme cursor jumps. - Argument Whitelisting: Mouse button actions are restricted to a predefined list (
left,right,middle), preventing the injection of arbitrary commands or codes.
Audit Metadata