desktop-mouse

Pass

Audited by Gen Agent Trust Hub on Mar 24, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes a local script molt-mouse which acts as a wrapper for the ydotool utility to perform mouse movements and clicks.
  • Input Validation: The script uses regular expressions (^-?[0-9]+$) to ensure that coordinates and movement deltas are strictly numeric.
  • Safety Constraints: It implements a clamp_int function to limit the maximum movement distance to a configurable value (default 2000 pixels), preventing uncontrolled or extreme cursor jumps.
  • Argument Whitelisting: Mouse button actions are restricted to a predefined list (left, right, middle), preventing the injection of arbitrary commands or codes.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 24, 2026, 12:25 AM