computer-use
Warn
Audited by Socket on Oct 27, 2026
1 alert found:
SecuritySecuritySKILL.md
MEDIUMSecurityMEDIUM
SKILL.md
SUSPICIOUS. The core GUI-automation purpose is coherent, and some referenced tools are official, but the skill combines unpinned runtime installs, transitive skill installation, autonomous fallback execution, and at least two insufficiently verified external components. That footprint is broader than necessary for a normal testing skill and creates high supply-chain and trust-expansion risk.
Confidence: 89%Severity: 78%
Audit Metadata