스킬 auv-computer-control

📦

auv-computer-control

Name: auv-computer-control
Author: 0xselenicdove

콘텐츠 리비전 r1 안전 ⚙️ 외부 명령어🌐 네트워크 접근

Control Native Desktop Apps with AUV

Native desktop workflows can fail when automation uses stale targets or mistakes input delivery for success. This skill guides AUV observation, targeted actions, and independent verification.

지원: Claude Codex Code(CC)

📊 75 적절함

Maintain this Skill? Claim it 📊 75 적절함

내 에이전트로 설치

이 요청을 에이전트에 복사하세요. 공식 Skill 페이지와 매니페스트가 포함되어 있습니다.

에이전트 요청

Review the Skillstore skill "auv-computer-control" from https://skillstore.io/skills/0xselenicdove-auv-computer-control.md and its manifest at https://skillstore.io/api/skills/0xselenicdove-auv-computer-control/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

에이전트는 계속해서 계획을 표시하고 보안 정책에서 요구하는 확인을 요청해야 합니다.

에이전트가 읽기 쉬운 리소스

AI 에이전트, 크롤러, 스크립트가 전체 페이지 대신 정리된 컨텍스트만 필요할 때 이 링크를 사용하세요.

Markdown 상세 GET /skills/0xselenicdove-auv-computer-control.md 서명된 manifest GET /api/skills/0xselenicdove-auv-computer-control/manifest 서명된 lockfile GET /api/skills/0xselenicdove-auv-computer-control/lockfile

테스트해 보기

"auv-computer-control" 사용 중입니다. Show an example completion report for entering a query without submitting it.

예상 결과:

Illustrative result: The intended application window was identified from fresh observation.
The query field was focused, and its full value was independently checked.
No submission was performed.

"auv-computer-control" 사용 중입니다. Show an example report when a selected remote Device becomes unavailable.

예상 결과:

Illustrative result: The selected remote Device is unavailable, so further actions stopped.
No fallback to the local desktop occurred.
The workflow remains incomplete until the selected Device is accessible.

보안 감사

안전

v1 • 2026. 10. 6. 버전별 보고서 열기

All 16 static findings are false positives from documentation, Markdown delimiters, or intended desktop operations. No evidence found of credential theft, screenshot upload, prompt injection, or unauthorized reconnaissance in the reviewed passages. AUV installation, OS permissions, and stored desktop evidence still require careful user control; external runtime implementations were not audited.

스캔된 파일

117

분석된 줄 수

검토 항목

오탐 무시됨

위험 요인

⚙️ 외부 명령어 (9)

references/operations.md:25 SKILL.md:20-26 SKILL.md:26-30 SKILL.md:30 SKILL.md:36-38 SKILL.md:38-39 SKILL.md:39 SKILL.md:44 SKILL.md:46

🌐 네트워크 접근 (2)

SKILL.md:3 SKILL.md:8

가장 최근에 완료된 정적·의미론적 감사에서 확인된 보안 발견 사항이 감지되지 않았습니다. 이는 스킬에 부작용이 없음을 증명하지 않습니다.

감사자: codex

이 보고서 공유 및 인용

버전이 지정된 평가 보고서, 중립 배지, 임베드 카드 및 인용을 공유하세요. Skillstore는 근거를 보고하지만 이 Skill의 안전 여부를 판단하지 않습니다.

버전별 보고서 열기

보고서 링크 복사

https://skillstore.io/skills/0xselenicdove-auv-computer-control/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 배지

[![Skillstore security assessment](https://skillstore.io/badges/skills/0xselenicdove-auv-computer-control/security.svg)](https://skillstore.io/skills/0xselenicdove-auv-computer-control?utm_source=security_passport_badge)

HTML 배지

<a href="https://skillstore.io/skills/0xselenicdove-auv-computer-control?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/0xselenicdove-auv-computer-control/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

임베드 카드

<iframe src="https://skillstore.io/embed/skills/0xselenicdove-auv-computer-control.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

학술 인용 (APA · BibTeX · CFF)

APA 인용

0xselenicdove. (2026). auv-computer-control security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/0xselenicdove-auv-computer-control/audits/1

BibTeX 인용

@techreport{0xselenicdove-0xselenicdove-auv-computer-control-2026,
  author = {0xselenicdove},
  title = {auv-computer-control security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/0xselenicdove-auv-computer-control/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "auv-computer-control security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "0xselenicdove"
date-released: "2026-10-06"
url: "https://skillstore.io/skills/0xselenicdove-auv-computer-control/audits/1"
identifiers:
  - type: other
    value: "skillstore:0xselenicdove-auv-computer-control:audit:1"
    description: "Skillstore immutable audit report identifier"

Skillstore 점수

이 점수의 이유 증거 신뢰도: 중간

아키텍처

유지보수성

콘텐츠

커뮤니티

사양 준수

만들 수 있는 것

Enter Information in a Native App

Observe the intended window, focus a field, enter approved text, and verify its complete value before submission.

Check Desktop Workflow Outcomes

Inspect application state after targeted actions and distinguish delivered input from a verified change.

Repeat an Authorized Remote Workflow

Preserve an observed Device target while turning a demonstrated workflow into a bounded, task-scoped operation.

이 프롬프트를 사용해 보세요

Check AUV Readiness

Check whether AUV is available and identify permissions needed for observing [app]. Do not install software or change permissions.

Fill and Verify a Field

In [app], locate [window] and enter [text] into [field]. Verify the full value without submitting, and stop if the target is ambiguous.

Recover from an Unverified Action

Inspect [app] after the previous action. Check partial progress and focus before proposing a retry. Do not repeat submission or other irreversible actions.

Reuse a Verified Remote Workflow

For authorized Device [device], inspect installed plugins for [verified workflow]. Propose task-scoped reuse with explicit targets, bounded waits, and independent checks.

모범 사례

Read installed command help and refresh observations before selecting a window, control, or remote Device.
Verify complete field values and final application state; stop before repeating actions with uncertain effects.
Use authorized targets and a controlled evidence directory; protect stored screenshots and output containing sensitive information.

피하기

Reusing stale coordinates or identifiers after changing tools, windows, display scale, or remote targets.
Treating successful command delivery or a dry run as proof that the user goal was achieved.
Changing permissions, starting listeners, enrolling credentials, or retrying submissions without appropriate authorization.

자주 묻는 질문

Does installing this skill install AUV?

No. AUV, its plugins, and required OS permissions are separate setup requirements.

Does the skill require MCP?

No. The CLI supports local core operations. An already connected MCP server can be used after discovering its actual tool schemas.

Which operating systems can it guide?

The references describe macOS, Linux, and Windows support. Individual commands and targeting options vary; installed help determines available behavior.

Which permissions may AUV need?

On macOS, operations may require Accessibility, Screen Recording, or Automation permissions. The user grants permissions; the skill forbids automatic changes.

Where is desktop evidence stored?

Default recording uses .auv/store under the working directory. A task-local store root can be selected; stored captures may contain sensitive data.

How does the skill confirm success?

It checks direct results and independently observes the application outcome. Delivered input alone is not treated as verified completion.