jev-desktop
Warn
Audited by Socket on Sep 19, 2026
1 alert found:
AnomalyAnomalySKILL.md
LOWAnomalyLOW
SKILL.md
SUSPICIOUS. The skill is internally coherent for remote-assisted desktop automation, and the external agent-desktop dependency appears same-project and publicly released rather than deceptive. The main risk is substantial data exposure: local screen contents and field values are transmitted to a remote API, and the tool can autonomously act inside desktop apps with real consequences despite having sensible confidence gates.
Confidence: 88%Severity: 68%
Audit Metadata