The Agent Skills Directory

[COMMAND_EXECUTION]: The skill executes shell commands via the exec tool to control mouse movements and clicks. This behavior is restricted to the molt-mouse wrapper script, which includes robust input validation using regular expressions for all numeric and string arguments (e.g., [[ "$dx" =~ ^-?[0-9]+$ ]]). Use of ydotool is standard for headless or containerized mouse automation on Linux.
[PRIVILEGE_ESCALATION]: While the script interacts with system-level mouse input via a socket (/run/user/1000/.ydotool_socket), it does so with standard user permissions and does not utilize sudo or other elevated privilege mechanisms.
[INDIRECT_PROMPT_INJECTION]: The skill processes user-supplied numeric values and button names. The risk of injection is mitigated by strict shell-side validation that ensures inputs are purely numeric or match a specific whitelist of button names before being passed to the ydotool binary.

desktop-mouse