computer-use

Warn

Audited by Socket on Sep 15, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

SUSPICIOUS: The skill’s desktop-control capabilities match its purpose and data flows stay local/official, so there is no strong evidence of credential theft or malware. However, it enables high-impact GUI actions in the background and depends on same-org pipe-to-shell installers plus transitive skill installation, making it a medium-risk automation skill rather than a benign low-risk guide.

Confidence: 89%Severity: 60%
Audit Metadata
Analyzed At
Sep 15, 2026, 03:48 PM
Package URL
pkg:socket/skills-sh/nousresearch%2Fhermes-agent%2Fcomputer-use%2F@a13cc1683cc406c6efb08920c144ca533bf4861897dfd319a31a78e168db144b
Security Audit — socket — computer-use