📦

computer-use

Name: computer-use
Author: stablyai

Ревизия содержимого r1 Безопасно ⚙️ Внешние команды

Control desktop apps with the Orca computer-use CLI

Reading and operating desktop application windows by trial and error wastes time and risks the wrong clicks. This skill lets Claude, Codex, and Claude Code inspect accessibility trees and screenshots, then perform precise, safe UI actions across native apps and browsers.

Поддерживает: Claude Codex Code(CC)

🥉 78 Бронза

Установить с помощью моего Агента

Скопируйте этот запрос в своего Агента. Он содержит каноническую страницу Skill и манифест.

Запрос агента

Review the Skillstore skill "computer-use" from https://skillstore.io/skills/stablyai-computer-use.md and its manifest at https://skillstore.io/api/skills/stablyai-computer-use/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

Ваш Агент по-прежнему должен показать план и запросить все подтверждения, требуемые политикой безопасности.

Ресурсы для AI-агентов

Используйте эти ссылки, когда AI-агенту, crawler или script нужен чистый контекст вместо полной страницы.

Markdown-детали GET /skills/stablyai-computer-use.md Подписанный manifest GET /api/skills/stablyai-computer-use/manifest Подписанный lockfile GET /api/skills/stablyai-computer-use/lockfile

Протестировать

Использование «computer-use». Read the current state of the Spotify app and tell me what is playing.

Ожидаемый результат:

The agent lists applications, selects the Spotify bundle, reads its accessibility tree, and reports the track title, artist, and playback controls that are visible, without changing playback.

Использование «computer-use». In my Edge browser window, set the address bar to example.com and press Return.

Ожидаемый результат:

The agent restores the browser window to the foreground, sets the address field value to example.com, presses Return, then reads the refreshed state to confirm the page began loading.

Аудит безопасности

Безопасно

v1 • 19.07.2026 Открыть версионный отчет

This skill is documentation for Orca's computer-use CLI. The 50 external_commands findings for 'Ruby/shell backtick execution' are false positives: every match is a Markdown inline-code backtick around a command name or flag, not runtime backtick execution. The four PowerShell/cmd.exe matches are prose describing shell-neutral examples, and the six 'blocker' matches (system reconnaissance and screen-capture) reflect the skill's legitimate, disclosed purpose of reading UI state; the skill explicitly instructs against destructive actions and against exposing secrets. No malicious intent, data exfiltration, or prompt injection was found.

Просканировано файлов

154

Проанализировано строк

Пункты проверки

Ложные срабатывания проигнорированы

Факторы риска

⚙️ Внешние команды

Конкретные расположения не записаны

Последний завершенный статический и семантический аудит не обнаружил подтвержденных проблем безопасности. Это не доказывает отсутствие побочных эффектов у навыка.

Аудитор:: claude

Поделиться и цитировать этот отчет

Делитесь версионным отчетом об оценке, нейтральным значком, встраиваемой карточкой и цитатами. Skillstore публикует доказательства, не решая, безопасен ли этот Skill.

Открыть версионный отчет

Копировать ссылку на отчёт

https://skillstore.io/skills/stablyai-computer-use/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Значок Markdown

[![Skillstore security assessment](https://skillstore.io/badges/skills/stablyai-computer-use/security.svg)](https://skillstore.io/skills/stablyai-computer-use?utm_source=security_passport_badge)

Значок HTML

<a href="https://skillstore.io/skills/stablyai-computer-use?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/stablyai-computer-use/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

Встраиваемая карточка

<iframe src="https://skillstore.io/embed/skills/stablyai-computer-use.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>

Академические ссылки (APA · BibTeX · CFF)

Цитата APA

stablyai. (2026). computer-use security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/stablyai-computer-use/audits/1

Цитата BibTeX

@techreport{stablyai-stablyai-computer-use-2026,
  author = {stablyai},
  title = {computer-use security audit report (audit version 1)},
  institution = {Skillstore},
  year = {2026},
  number = {1},
  url = {https://skillstore.io/skills/stablyai-computer-use/audits/1},
  note = {Author version unspecified}
}

CITATION.cff

cff-version: 1.2.0
message: "If you use this Skill, cite its author and this versioned security audit report."
title: "computer-use security audit report (audit version 1)"
version: "unspecified"
type: report
authors:
  - name: "stablyai"
date-released: "2026-07-19"
url: "https://skillstore.io/skills/stablyai-computer-use/audits/1"
identifiers:
  - type: other
    value: "skillstore:stablyai-computer-use:audit:1"
    description: "Skillstore immutable audit report identifier"

Оценка Skillstore

Почему такая оценка Достоверность доказательств: Средний

Архитектура

Сопровождаемость

Контент

Сообщество

Соответствие спецификации

Что вы можете построить

Read the current state of a desktop app

Ask the agent to report what is visible in an app such as Spotify or Slack by reading its accessibility tree and screenshot, without changing anything.

Fill a form in a desktop browser window

Have the agent set a browser address field, submit a search, or complete a form field by field, verifying focus after each step.

Operate accessibility controls in a native application

Direct the agent to click controls, set values, and press keys through the accessibility layer instead of fragile pixel coordinates.

Попробуйте эти промпты

Read a desktop app

Read the current state of the Spotify app and tell me what is playing. Do not change anything.

Find and target a window

List my open browser windows, pick the one showing my email, and get its app state.

Fill a browser field

In my Edge browser window, set the address bar to example.com and press Return.

Multi-step form completion with verification

Open the compose form in my mail app, type the subject line I give you, then confirm the focused field after each step before continuing. Do not send the message.

Лучшие практики

Refresh app state after every UI-changing action and read element indexes from the returned tree before choosing the next action.
Prefer semantic actions such as set-value and click over raw screenshot coordinates, and pass sensitive text through stdin to keep it out of shell history.
Confirm the focused element after each field action, especially in browser forms, before assuming input landed.

Избегать

Inferring valid element indexes from element counts or reusing stale indexes after navigation or re-rendering.
Performing destructive actions such as sending messages, submitting forms, buying items, or changing settings without explicit user permission.
Trusting raw screenshot pixels for coordinates without checking the reported scale and current window bounds.

Часто задаваемые вопросы

What does this skill actually do?

It lets an AI agent inspect and operate local desktop application windows through the Orca computer-use CLI, using accessibility trees and screenshots to read state and perform safe UI actions.

Which AI tools can use this skill?

It supports Claude, Codex, and Claude Code.

Does it require special permissions?

Yes. The host must grant accessibility and screenshot permissions, and the Orca CLI must be installed and reachable.

Will it take actions without my consent?

No. The skill instructs the agent to avoid sending messages, submitting forms, buying items, deleting data, or changing settings unless you explicitly request that action.

Are screenshots sent anywhere?

No. Screenshots are written to a local file for on-device visual confirmation. The skill does not upload or transmit captured pixels.

Why do element indexes sometimes fail?

Element indexes are short-lived and go stale after navigation, focus changes, scrolling, or app re-rendering. Refresh the app state to get current indexes before acting.

Сведения для разработчиков

Автор

stablyai

Лицензия

MIT

Ревизия Skillstore

Примечание о версии

Автор не указал версию.

Репозиторий

https://github.com/stablyai/orca/tree/5848550b5ebd08098cad3e2b9086fd2472a52944/skills/computer-use

Ссылка

e8ce3fcb20197aefea54f9fb43ccce4716e3209c

Актуальность поддержки

19.07.2026

Использование

0 загрузок · 0 просмотров

Структура файлов

📄 SKILL.md