The Agent Skills Directory

[COMMAND_EXECUTION]: The setup-vnc.sh script performs several high-privilege operations requiring sudo access.
It installs system packages via apt.
It modifies system binaries by moving /usr/bin/xfdesktop to /usr/bin/xfdesktop.real and replacing it with a custom shell script to prevent VNC flickering.
It installs and enables multiple persistent systemd services (xvfb, xfce-minimal, x11vnc, novnc) that auto-start on boot.
[PROMPT_INJECTION]: The skill is susceptible to indirect prompt injection because the agent's actions are driven by the visual content of the desktop environment.
Ingestion points: Screenshots are captured via scripts/screenshot.sh and scripts/zoom.sh and returned to the agent as Base64 data.
Boundary markers: No markers or instructions are provided to help the agent distinguish between its own UI and potentially malicious content displayed on the screen (e.g., within a browser or document).
Capability inventory: The skill allows full mouse and keyboard control, providing the agent with the ability to execute any command in a terminal or manipulate any application on the system.
Sanitization: There is no evidence of filtering or sanitization of the content appearing in screenshots before it reaches the agent.

computer-use