Habilidades agent-desktop
📦

agent-desktop

Revisión del contenido r1 Riesgo medio ⚙️ Comandos externos🌐 Acceso a red📁 Acceso al sistema de archivos

Automate Desktop Apps With Accessibility Controls

Desktop workflows often require repeated navigation, data entry, and checks across application windows. This skill guides agents through scoped accessibility actions and verification using agent-desktop.

Compatible con: Claude Codex Code(CC)
Maintain this Skill? Claim it 📊 67 Adecuado

Instalar con mi Agente

Copia esta solicitud en tu Agente. Incluye la página canónica del Skill y el manifiesto.

Solicitud de agente
Review the Skillstore skill "agent-desktop" from https://skillstore.io/skills/vercel-labs-agent-desktop.md and its manifest at https://skillstore.io/api/skills/vercel-labs-agent-desktop/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Tu Agente debe seguir mostrando su plan y solicitar cualquier confirmación exigida por la política de seguridad.

Recursos legibles por agentes

Usa estos enlaces cuando un agente de IA, crawler o script necesite contexto limpio en vez de leer la página completa.

Pruébalo

Usando "agent-desktop". Inspect the active Notes window without changing it.

Resultado esperado:

Example report: The selected Notes window exposes a sidebar, a note list, and an editor. No controls were activated.

Usando "agent-desktop". Fill the contact form with approved details and stop before submission.

Resultado esperado:

  • Example report: Name and email fields match the approved values.
  • The selected option was checked after entry.
  • The form remains open and was not submitted.

Usando "agent-desktop". A Save shortcut was delivered, but its wait timed out. Check before retrying.

Resultado esperado:

Example report: The save dialog is already open. The shortcut was not repeated. Confirmation is pending in the dialog.

Auditoría de seguridad

Riesgo medio

All 67 static findings are benign documentation matches, including Markdown backticks, keystroke delivery, local session storage, and loopback CDP endpoints. One semantic finding concerns pointer dispatch after inconclusive hit tests, which can misdirect input despite visibility checks. No evidence found of credential theft, covert keylogging, external exfiltration, or audit-directed prompt injection in the five reviewed files.

5
Archivos escaneados
846
Líneas analizadas
0
Elementos de revisión
0
Falsos positivos ignorados

Preocupaciones de seguridad confirmadas (1)

Medio
Pointer Delivery Proceeds After Inconclusive Hit Tests
The documentation states that receives_events fails open when a hit test is inconclusive. Pointer input can reach an obscuring control or window, causing unintended actions or disclosure of typed data.
The reference explicitly states that unknown hit-test results still dispatch input. The implementation was not supplied, so this finding concerns documented behavior.
Auditado por: codex
Compartir y citar este informe

Comparte el informe de evaluación versionado, la insignia neutral, la tarjeta insertable y las citas. Skillstore presenta evidencias sin decidir si este Skill es seguro.

Abrir el informe versionado
Evaluación de seguridad

Copiar enlace del informe

https://skillstore.io/skills/vercel-labs-agent-desktop/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Insignia Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/vercel-labs-agent-desktop/security.svg)](https://skillstore.io/skills/vercel-labs-agent-desktop?utm_source=security_passport_badge)

Insignia HTML

<a href="https://skillstore.io/skills/vercel-labs-agent-desktop?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/vercel-labs-agent-desktop/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Tarjeta para insertar

<iframe src="https://skillstore.io/embed/skills/vercel-labs-agent-desktop.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
Citas académicas (APA · BibTeX · CFF)

Cita APA

vercel-labs. (2026). agent-desktop security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/vercel-labs-agent-desktop/audits/1

Cita BibTeX

@techreport{vercel-labs-vercel-labs-agent-desktop-2026, author = {vercel-labs}, title = {agent-desktop security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/vercel-labs-agent-desktop/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "agent-desktop security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "vercel-labs" date-released: "2026-10-31" url: "https://skillstore.io/skills/vercel-labs-agent-desktop/audits/1" identifiers: - type: other value: "skillstore:vercel-labs-agent-desktop:audit:1" description: "Skillstore immutable audit report identifier"

Puntuación de Skillstore

Por qué esta puntuación Confianza de la evidencia: Medio
45
Arquitectura
85
Mantenibilidad
87
Contenido
65
Comunidad
83
Cumplimiento de la especificación

Lo que puedes crear

Complete Repeated Desktop Forms

Enter approved data into application fields, select options, and verify the completed form before submission.

Check Desktop UI Workflows

Inspect controls, exercise menus and dialogs, and distinguish verified changes from uncertain input delivery.

Review Application Notifications

List notifications from a selected app and act on specific entries only after checking their current fingerprints.

Prueba estos prompts

Inspect an Application
Check agent-desktop status and permissions, then inspect [app]. List its visible controls without changing anything.
Fill a Form Without Submitting
In [app], fill [fields] with [approved values]. Use current references and verify each field. Stop before submitting or enabling physical input.
Navigate a Save Dialog
In [app], save the current document to [approved destination]. Inspect each menu or dialog surface. Ask before overwriting files or using physical input.
Run a Scoped Multi-Step Workflow
Run [approved workflow] in [app] within a dedicated session. Use event waits and stop batches on errors. Verify uncertain deliveries before any repeat. Keep screenshot tracing off.

Mejores prácticas

  • Check status and permissions, then scope reads and actions to the intended app, window, or overlay.
  • Use fresh qualified references, event waits, and independent state checks before repeating an uncertain action.
  • Require explicit permission for physical input and minimize sensitive artifacts, clipboard reads, and CDP exposure.

Evitar

  • Retrying a click, submission, or toggle merely because a wait timed out.
  • Switching to physical input after a headless refusal without explicit user permission.
  • Sharing unredacted screenshots, notifications, or clipboard contents, or running parallel writers against one editor.

Preguntas frecuentes

Which operating systems are supported?
The guide covers macOS, Windows, and Linux. Available surfaces, permissions, and action mechanisms vary by platform.
Does this skill install the desktop tool?
No. It requires an available agent-desktop binary. Check status and load the platform reference before starting.
Can it work without taking keyboard or mouse focus?
Supported semantic actions are headless by default. Physical gestures require headed mode and explicit user permission; some actions vary by operating system.
Does success mean the application saved my changes?
Not necessarily. Field verification proves the observed field value, not document acceptance. Check the application's resulting state independently.
Are captured records always redacted?
No. Trace lines redact sensitive fields, but optional screenshot artifacts are unredacted. Notification output is verbatim, and clipboard reads may expose private data.
Is a browser automation client required?
No. Accessibility is the default path. An optional CDP client can control freshly launched Chromium apps; close the debug-enabled app afterward.

Detalles del desarrollador

Licencia

MIT

Revisión de Skillstore

r1

Aviso de versión

El autor no declaró una versión.

Ref.

443e0d99cb0af7754aabaecc5bf8b6dcf2dae44d

Actualidad del mantenimiento

31/10/2026

Uso

0 descargas · 0 vistas

Más de vercel-labs

Ver todo
Ver todo