OverviewHistoryStatsSecurity
Security
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Independent checks from skills.sh's audit partners.
Warn5 providerslatest audit Apr 29, 2026
Independent checks from skills.sh's audit partners.
This skill enables desktop automation via Midscene.js, a vision-based tool. It downloads its dependencies from the NPM registry at runtime and captures screenshots of the entire desktop for analysis. Users should be aware that the agent has full mouse and keyboard control and that the vision-based interaction model is susceptible to indirect prompt injection from content visible on the screen.
Detected behaviors
No alerts
2 issues
1/1 file flagged
Score: 93/100 · 2 sections analyzed