{"data":{"skill":{"slug":"0xselenicdove-auv-computer-control","name":"auv-computer-control","icon":"📦","repo":"https://github.com/0xselenicdove/auv-computer-control-skill/tree/538428ee3b8d7db489b9bc12c537e25a0d86baab/skills/auv-computer-control","status":"approved","author":"0xselenicdove","authorVersion":null,"skillstoreRevision":1},"audit":{"id":"578fc150-95cc-4d8c-9c8a-c954c47527ee","skill_id":"ab1c0d86-70a8-4270-967e-09492ef0c7fb","version":1,"content_hash":"v3:e406bf64b5db6e514879399e87b346fa7ff7c2fb:07ebbda3ba15daa7c4de0ca63bd6d4d408cfe722408d73d470df3febb5c7aedd:c09bdc28ba45aa24ad0e3ea72b469a04b34dc896dcd43f4b00baa33cc6c661d4:736b696c6c732f307873656c656e6963646f76652f6175762d636f6d70757465722d636f6e74726f6c:17298255578af2d669ae9e212fb48a8d","risk_level":"safe","is_blocked":false,"safe_to_publish":true,"analysis_status":"ok","agent_auto_install_policy":"allowed","manual_install_policy":"allowed","summary":"All 16 static findings are false positives from documentation, Markdown delimiters, or intended desktop operations. No evidence found of credential theft, screenshot upload, prompt injection, or unauthorized reconnaissance in the reviewed passages. AUV installation, OS permissions, and stored desktop evidence still require careful user control; external runtime implementations were not audited.","remediation":[],"risk_factor_evidence":[{"factor":"external_commands","evidence":[{"file":"references/operations.md","line_end":25,"line_start":25},{"file":"SKILL.md","line_end":26,"line_start":20},{"file":"SKILL.md","line_end":30,"line_start":26},{"file":"SKILL.md","line_end":30,"line_start":30},{"file":"SKILL.md","line_end":38,"line_start":36},{"file":"SKILL.md","line_end":39,"line_start":38},{"file":"SKILL.md","line_end":39,"line_start":39},{"file":"SKILL.md","line_end":44,"line_start":44},{"file":"SKILL.md","line_end":46,"line_start":46}]},{"factor":"network","evidence":[{"file":"SKILL.md","line_end":3,"line_start":3},{"file":"SKILL.md","line_end":8,"line_start":8}]}],"critical_findings":[],"high_findings":[],"medium_findings":[],"low_findings":[],"dangerous_patterns":[],"files_scanned":3,"total_lines":117,"audit_model":"codex","audited_at":"2026-10-06T21:36:09.592+00:00","created_at":"2026-10-11T03:30:11.204588+00:00","static_findings":[{"id":"external_commands:references/operations.md:25:powershell-invocation","file":"references/operations.md","pattern":"PowerShell invocation","snippet":"Linux/Windows have native drivers, but individual core commands have narrower platform support. Foll","category":"external_commands","line_end":25,"severity":"high","line_start":25},{"id":"sensitive:references/operations.md:43:certificate-key-files","file":"references/operations.md","pattern":"Certificate/key files","snippet":"For ordered keyboard actions, inspect `input.keyboard --help`; `--actions` accepts tagged JSON actio","category":"sensitive","line_end":43,"severity":"high","line_start":43},{"id":"blocker:references/operations.md:23:screen-capture-upload","file":"references/operations.md","pattern":"Screen capture upload","snippet":"The user grants Accessibility for AX/input, Screen Recording for capture/OCR, and Automation for rel","category":"blocker","line_end":23,"severity":"high","line_start":23},{"id":"blocker:references/operations.md:49:system-reconnaissance","file":"references/operations.md","pattern":"System reconnaissance","snippet":"- `auv devices list` discovers daemon-visible Devices. Root selection precedes the subcommand: `auv ","category":"blocker","line_end":49,"severity":"low","line_start":49},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```sh","category":"external_commands","line_end":26,"severity":"medium","line_start":20},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"```","category":"external_commands","line_end":30,"severity":"medium","line_start":26},{"id":"external_commands:SKILL.md:30:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Inspect `auv invoke <command-id> --help` before first use in a session. Installed help is authoritat","category":"external_commands","line_end":30,"severity":"medium","line_start":30},{"id":"external_commands:SKILL.md:36:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"1. Establish the intended app/window from fresh observations, such as `auv invoke window.list --json","category":"external_commands","line_end":38,"severity":"medium","line_start":36},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"3. Focus the intended control explicitly. An app/window target selects the recipient, not the text f","category":"external_commands","line_end":39,"severity":"medium","line_start":38},{"id":"external_commands:SKILL.md:39:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"4. Deliver the smallest targeted action. Use `app:<observed-application-id>` or `window:<observed-wi","category":"external_commands","line_end":39,"severity":"medium","line_start":39},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Use invoke `--json`. Retain stdout even on nonzero process exit and keep stderr separately. The insp","category":"external_commands","line_end":44,"severity":"medium","line_start":44},{"id":"external_commands:SKILL.md:46:ruby-shell-backtick-execution","file":"SKILL.md","pattern":"Ruby/shell backtick execution","snippet":"Use task-local `--store-root` if evidence would clutter the working directory; default recording is ","category":"external_commands","line_end":46,"severity":"medium","line_start":46},{"id":"network:SKILL.md:3:python-http-libraries","file":"SKILL.md","pattern":"Python HTTP libraries","snippet":"description: Incorporate moeru-ai/AUV into native desktop app control through its CLI or connected M","category":"network","line_end":3,"severity":"low","line_start":3},{"id":"network:SKILL.md:8:hardcoded-url","file":"SKILL.md","pattern":"Hardcoded URL","snippet":"Use [moeru-ai/AUV](https://github.com/moeru-ai/auv) as an execution layer in the existing computer-c","category":"network","line_end":8,"severity":"low","line_start":8},{"id":"blocker:SKILL.md:50:screen-capture-upload","file":"SKILL.md","pattern":"Screen capture upload","snippet":"- Coordinate input uses the command's logical screen/window/display basis; OCR boxes can be capture ","category":"blocker","line_end":50,"severity":"high","line_start":50},{"id":"blocker:SKILL.md:58:system-reconnaissance","file":"SKILL.md","pattern":"System reconnaissance","snippet":"Reuse installed plugins first. When a verified repeated flow needs custom reuse, write the smallest ","category":"blocker","line_end":58,"severity":"low","line_start":58}],"finding_verdicts":[{"id":"external_commands:references/operations.md:25:powershell-invocation","reason":"The passage describes elevated PowerShell as a Windows helper setup prerequisite; it contains no PowerShell invocation or payload. Setup is restricted to authorized tasks.","verdict":"false_positive","confidence":0.98},{"id":"sensitive:references/operations.md:43:certificate-key-files","reason":"The line documents input.keyboard and tagged keyboard actions, not certificate or private-key files. It explicitly forbids submission after unverified field edits.","verdict":"false_positive","confidence":1},{"id":"blocker:references/operations.md:23:screen-capture-upload","reason":"This passage explains user-granted screen capture and accessibility permissions, not screenshot upload. It explicitly prohibits automatic OS permission changes.","verdict":"false_positive","confidence":0.99},{"id":"blocker:references/operations.md:49:system-reconnaissance","reason":"Device discovery and display listing select an observed remote target for the requested workflow. The text requires preserving that selection and treats pairing as separate setup.","verdict":"false_positive","confidence":0.98},{"id":"external_commands:SKILL.md:20:ruby-shell-backtick-execution","reason":"The backticks open a Markdown shell example containing AUV availability, version, diagnostic, help, and plugin checks. There is no Ruby execution or shell substitution.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:26:ruby-shell-backtick-execution","reason":"The matched backticks close a Markdown example, followed by authorized setup guidance and CLI help documentation. They are not executable shell substitutions.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:30:ruby-shell-backtick-execution","reason":"Inline backticks format AUV help and plugin discovery commands. The instructions require checking supported arguments and do not construct executable commands from untrusted input.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:36:ruby-shell-backtick-execution","reason":"Inline commands document window observation and explicit text-control focus. The workflow disambiguates windows and treats UI text as data, not instructions.","verdict":"false_positive","confidence":0.99},{"id":"external_commands:SKILL.md:38:ruby-shell-backtick-execution","reason":"Backticks format focus operations and observed target identifiers. These are scoped desktop-control instructions, not shell backtick execution.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:39:ruby-shell-backtick-execution","reason":"The line documents target syntax and operation-specific targeting limits. It requires observed identifiers and preserving remote Device identity, with no executable backtick expression.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:44:ruby-shell-backtick-execution","reason":"Backticks format JSON result fields and status values. The passage explains result handling and independent verification, not command execution.","verdict":"false_positive","confidence":1},{"id":"external_commands:SKILL.md:46:ruby-shell-backtick-execution","reason":"Backticks format local recording options, storage paths, and artifact fields. The text directs local image inspection and contains no shell substitution or upload instruction.","verdict":"false_positive","confidence":0.99},{"id":"network:SKILL.md:3:python-http-libraries","reason":"The matched line is YAML prose describing AUV CLI and MCP integration. It imports no Python HTTP library and makes no network request.","verdict":"false_positive","confidence":1},{"id":"network:SKILL.md:8:hardcoded-url","reason":"The GitHub URL identifies the upstream AUV project in a Markdown link. It is not an upload endpoint or executable request carrying user data.","verdict":"false_positive","confidence":0.99},{"id":"blocker:SKILL.md:50:screen-capture-upload","reason":"The line explains screenshot pixel conversion and logical input coordinates. It contains no upload command, destination, or instruction to transmit captures.","verdict":"false_positive","confidence":1},{"id":"blocker:SKILL.md:58:system-reconnaissance","reason":"The passage recommends task-scoped reuse of verified workflows using argument arrays and explicit targets. It requires bounded waits and stops on ambiguous partial effects.","verdict":"false_positive","confidence":0.99}],"semantic_findings":[],"subject_marketplace_commit_sha":"e406bf64b5db6e514879399e87b346fa7ff7c2fb","subject_content_hash":"07ebbda3ba15daa7c4de0ca63bd6d4d408cfe722408d73d470df3febb5c7aedd","subject_tree_hash":"c09bdc28ba45aa24ad0e3ea72b469a04b34dc896dcd43f4b00baa33cc6c661d4","subject_plugin_path":"skills/0xselenicdove/auv-computer-control","audit_payload_hash":"17298255578af2d669ae9e212fb48a8d","confirmed_risk_level":"safe","scanner_version":"3.0.0","policy_version":"skillstore-security-audit-policy-v1","subject":{"marketplaceCommitSha":"e406bf64b5db6e514879399e87b346fa7ff7c2fb","contentHash":"07ebbda3ba15daa7c4de0ca63bd6d4d408cfe722408d73d470df3febb5c7aedd","treeHash":"c09bdc28ba45aa24ad0e3ea72b469a04b34dc896dcd43f4b00baa33cc6c661d4","pluginPath":"skills/0xselenicdove/auv-computer-control","auditPayloadHash":"17298255578af2d669ae9e212fb48a8d"},"scannerVersion":"3.0.0","policyVersion":"skillstore-security-audit-policy-v1"},"auditTranslation":null,"localization":{"requestedLocale":"en","contentLocale":"en","availableLocales":["en"],"fallbackToEnglish":false},"attestation":{"availability":"issued","url":"/api/skills/0xselenicdove-auv-computer-control/audits/1/attestation","status":"active"},"trust":{"publicState":"public","auditState":"complete","auditCurrentness":null,"confirmedRiskLevel":"safe","confirmedFindingCount":0,"capabilityReviewCount":0,"needsReviewCount":0,"falsePositiveCount":0,"agentAutoInstallPolicy":"allowed","manualInstallPolicy":"allowed","artifactSignatureState":"available","attestationState":"active","verificationState":"not_verified"},"isLatest":true}}