📦

computer-use

Name: computer-use
Author: stablyai

Revisión del contenido r1 Seguro ⚙️ Comandos externos

Control desktop apps with the Orca computer-use CLI

Reading and operating desktop application windows by trial and error wastes time and risks the wrong clicks. This skill lets Claude, Codex, and Claude Code inspect accessibility trees and screenshots, then perform precise, safe UI actions across native apps and browsers.

Compatible con: Claude Codex Code(CC)

🥉 78 Bronce

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente

Review the Skillstore skill "computer-use" from https://skillstore.io/skills/stablyai-computer-use.md and its manifest at https://skillstore.io/api/skills/stablyai-computer-use/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Detalle Markdown GET /skills/stablyai-computer-use.md Manifest firmado GET /api/skills/stablyai-computer-use/manifest Lockfile firmado GET /api/skills/stablyai-computer-use/lockfile

Pruébalo

Usando "computer-use". Read the current state of the Spotify app and tell me what is playing.

Resultado esperado:

The agent lists applications, selects the Spotify bundle, reads its accessibility tree, and reports the track title, artist, and playback controls that are visible, without changing playback.

Usando "computer-use". In my Edge browser window, set the address bar to example.com and press Return.

Resultado esperado:

The agent restores the browser window to the foreground, sets the address field value to example.com, presses Return, then reads the refreshed state to confirm the page began loading.

Auditoría de seguridad

Seguro

v1 • 19/7/2026 Abrir el informe versionado

This skill is documentation for Orca's computer-use CLI. The 50 external_commands findings for 'Ruby/shell backtick execution' are false positives: every match is a Markdown inline-code backtick around a command name or flag, not runtime backtick execution. The four PowerShell/cmd.exe matches are prose describing shell-neutral examples, and the six 'blocker' matches (system reconnaissance and screen-capture) reflect the skill's legitimate, disclosed purpose of reading UI state; the skill explicitly instructs against destructive actions and against exposing secrets. No malicious intent, data exfiltration, or prompt injection was found.

Archivos escaneados

154

Líneas analizadas

Elementos de revisión

Falsos positivos ignorados

Factores de riesgo

⚙️ Comandos externos

No se registraron ubicaciones específicas

La auditoría estática y semántica completada más reciente no detectó hallazgos de seguridad confirmados. Esto no demuestra que el skill no tenga efectos secundarios.

Auditado por: claude

Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado

Copiar enlace del informe

https://skillstore.io/skills/stablyai-computer-use/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/stablyai-computer-use/security.svg)](https://skillstore.io/skills/stablyai-computer-use?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/stablyai-computer-use?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/stablyai-computer-use/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/stablyai-computer-use.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Citas académicas (APA · BibTeX · CFF)

Cita APA

stablyai. (2026). computer-use security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/stablyai-computer-use/audits/1

Cita BibTeX

@techreport{stablyai-stablyai-computer-use-2026,
  author = {stablyai},
  title = {computer-use security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/stablyai-computer-use/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "computer-use security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "stablyai"
date-released: "2026-07-19"
url: "https://skillstore.io/skills/stablyai-computer-use/audits/1"
identifiers:
  - type: other
    value: "skillstore:stablyai-computer-use:audit:1"
    description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio

Arquitectura

Mantenibilidad

Contenido

Comunidad

Cumplimiento de la especificación

Lo que puedes crear

Read the current state of a desktop app

Ask the agent to report what is visible in an app such as Spotify or Slack by reading its accessibility tree and screenshot, without changing anything.

Fill a form in a desktop browser window

Have the agent set a browser address field, submit a search, or complete a form field by field, verifying focus after each step.

Operate accessibility controls in a native application

Direct the agent to click controls, set values, and press keys through the accessibility layer instead of fragile pixel coordinates.

Prueba estos prompts

Read a desktop app

Read the current state of the Spotify app and tell me what is playing. Do not change anything.

Find and target a window

List my open browser windows, pick the one showing my email, and get its app state.

Fill a browser field

In my Edge browser window, set the address bar to example.com and press Return.

Multi-step form completion with verification

Open the compose form in my mail app, type the subject line I give you, then confirm the focused field after each step before continuing. Do not send the message.

Mejores prácticas

Refresh app state after every UI-changing action and read element indexes from the returned tree before choosing the next action.
Prefer semantic actions such as set-value and click over raw screenshot coordinates, and pass sensitive text through stdin to keep it out of shell history.
Confirm the focused element after each field action, especially in browser forms, before assuming input landed.

Evitar

Inferring valid element indexes from element counts or reusing stale indexes after navigation or re-rendering.
Performing destructive actions such as sending messages, submitting forms, buying items, or changing settings without explicit user permission.
Trusting raw screenshot pixels for coordinates without checking the reported scale and current window bounds.

Preguntas frecuentes

What does this skill actually do?

It lets an AI agent inspect and operate local desktop application windows through the Orca computer-use CLI, using accessibility trees and screenshots to read state and perform safe UI actions.

Which AI tools can use this skill?

It supports Claude, Codex, and Claude Code.

Does it require special permissions?

Yes. The host must grant accessibility and screenshot permissions, and the Orca CLI must be installed and reachable.

Will it take actions without my consent?

No. The skill instructs the agent to avoid sending messages, submitting forms, buying items, deleting data, or changing settings unless you explicitly request that action.

Are screenshots sent anywhere?

No. Screenshots are written to a local file for on-device visual confirmation. The skill does not upload or transmit captured pixels.

Why do element indexes sometimes fail?

Element indexes are short-lived and go stale after navigation, focus changes, scrolling, or app re-rendering. Refresh the app state to get current indexes before acting.

Detalles del desarrollador

Autor

stablyai

Licencia

MIT

Revisión de Skillstore

Aviso de versión

El autor no declaró una versión.

Repositorio

https://github.com/stablyai/orca/tree/5848550b5ebd08098cad3e2b9086fd2472a52944/skills/computer-use

Ref.

e8ce3fcb20197aefea54f9fb43ccce4716e3209c

Actualidad del mantenimiento

19/7/2026

Uso

0 descargas · 0 vistas

Estructura de archivos

📄 SKILL.md