computer-use-cli
Warn
Audited by Socket on Mar 31, 2026
1 alert found:
AnomalyAnomalyscripts/cu.py
LOWAnomalyLOW
scripts/cu.py
This module is a powerful X11 automation utility: it can capture screenshots (and optionally include them as base64 in stdout) and drive mouse/keyboard input via xdotool, writing image files to /tmp/outputs (or a caller-specified path). There is no evidence of covert network exfiltration, persistence, obfuscation, or direct credential theft in this code. The primary security concern is abuse potential: if run in a context with access to a target DISPLAY, it can facilitate surveillance-like capture and interactive control. Review deployment permissions and consider restricting DISPLAY access, limiting screenshot/base64 output, and applying ImageMagick policy hardening.
Confidence: 62%Severity: 55%
Audit Metadata