desktop-use
Pass
Audited by Gen Agent Trust Hub on Sep 16, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides links to official installers for the cua-driver utility at
https://cua.ai/driver/install.shandhttps://cua.ai/driver/install.ps1. The instructions explicitly state that the agent must obtain user approval before using these installers and forbids silent installation or updates. - [COMMAND_EXECUTION]: The skill utilizes the
cua-driverCLI to perform desktop automation. Commands includelaunch_app,click,type_text, andget_window_state. The skill includes safety rules to ensure these commands are only executed against verified targets and within authorized sessions. - [INDIRECT_PROMPT_INJECTION]: As the skill interacts with third-party GUI applications, there is a theoretical risk of indirect prompt injection from application content. The skill mitigates this by mandating fresh state observations and forbidding the inference of evidence from absent or stale data, ensuring the agent remains grounded in current GUI state.
Audit Metadata