desktop-controller

SUSPICIOUS: The skill’s capabilities mostly match its stated purpose, and install/data-flow trust is relatively coherent, but it grants very broad desktop and browser control with screenshot feedback and supports autonomous external actions like sending messages and email. The main risk is not malware or credential theft evidence; it is high-impact automation scope and exposure to untrusted content during browser/UI control.