jev-desktop

Warn

Audited by Socket on Oct 31, 2026

1 alert found:

Anomaly
AnomalyLOW
SKILL.md

The skill’s desktop automation and remote screen interpretation fit its stated purpose, and the data flow is disclosed rather than concealed. However, default transmission of potentially sensitive screen values and autonomous high-confidence desktop actions create meaningful privacy and action risk; use a trusted endpoint, consider --no-values, and enable --confirm-destructive.

Confidence: 92%Severity: 58%
Audit Metadata
Analyzed At
Oct 31, 2026, 02:34 AM
Package URL
pkg:socket/skills-sh/vercel-labs%2Fagent-desktop%2Fjev-desktop%2F@d628f237ee44a2cf38e40d5e994fb1919d31c2a378ea543e5f225539c7698974