computer-use-cli

Warn

Audited by Socket on Mar 31, 2026

1 alert found:

Anomaly
AnomalyLOW
scripts/cu.py

This module is a powerful X11 automation utility: it can capture screenshots (and optionally include them as base64 in stdout) and drive mouse/keyboard input via xdotool, writing image files to /tmp/outputs (or a caller-specified path). There is no evidence of covert network exfiltration, persistence, obfuscation, or direct credential theft in this code. The primary security concern is abuse potential: if run in a context with access to a target DISPLAY, it can facilitate surveillance-like capture and interactive control. Review deployment permissions and consider restricting DISPLAY access, limiting screenshot/base64 output, and applying ImageMagick policy hardening.

Confidence: 62%Severity: 55%
Audit Metadata
Analyzed At
Mar 31, 2026, 10:49 PM
Package URL
pkg:socket/skills-sh/twillai%2Fskills%2Fcomputer-use-cli%2F@c72eeef7f914acccff527adf1661ba6522ba9ece