agent-desktop

CRITICAL E005: Suspicious download URL detected in skill instructions.

• Suspicious download URL detected (high risk: 0.80). The URL points to an individual GitHub repository (github.com/lahfir/agent-desktop) used as the source for installing a native CLI/binary; GitHub repos from unknown personal accounts distributing executables can be a malware distribution vector and should be verified (author identity, release artifacts, signatures, popularity) before trusting.

MEDIUM W011: Third-party content exposure detected (indirect prompt injection risk).

• Third-party content exposure detected (medium risk: 0.30). This skill’s runtime workflow delegates to the native agent-desktop CLI/accessible UI snapshotting via commands like snapshot, find, get, click, and wait that ingest the target desktop’s on-screen text/state (which can include outsider-authored content), rather than only trusted first-party docs.

MEDIUM W012: Unverifiable external dependency detected (runtime URL that controls agent).

• Potentially malicious external URL detected (high risk: 0.90). The skill instructs runtime installation and delegation to remote CLI code—specifically https://github.com/lahfir/agent-desktop and the Go module github.com/mvanhorn/printing-press-library/library/developer-tools/agent-desktop/cmd/agent-desktop-pp-cli@latest—which will be fetched and executed as required dependencies.