技能 auv-computer-control
📦

auv-computer-control

内容修订 r1 安全 ⚙️ 外部命令🌐 网络访问

Control Native Desktop Apps with AUV

Native desktop workflows can fail when automation uses stale targets or mistakes input delivery for success. This skill guides AUV observation, targeted actions, and independent verification.

支持: Claude Codex Code(CC)
📊 75 合格

使用我的智能体安装

将此请求复制给你的智能体,其中包含权威 Skill 页面和清单。

智能体请求
Review the Skillstore skill "auv-computer-control" from https://skillstore.io/skills/0xselenicdove-auv-computer-control.md and its manifest at https://skillstore.io/api/skills/0xselenicdove-auv-computer-control/manifest. Verify the artifact. You may proceed after verification, subject to the environment's own policy.

你的智能体仍应展示其计划,并按安全策略请求必要确认。

测试它

正在使用“auv-computer-control”。 Show an example completion report for entering a query without submitting it.

预期结果:

  • Illustrative result: The intended application window was identified from fresh observation.
  • The query field was focused, and its full value was independently checked.
  • No submission was performed.

正在使用“auv-computer-control”。 Show an example report when a selected remote Device becomes unavailable.

预期结果:

  • Illustrative result: The selected remote Device is unavailable, so further actions stopped.
  • No fallback to the local desktop occurred.
  • The workflow remains incomplete until the selected Device is accessible.

安全审计

安全
v1 • 2026/10/6 打开版本化报告

All 16 static findings are false positives from documentation, Markdown delimiters, or intended desktop operations. No evidence found of credential theft, screenshot upload, prompt injection, or unauthorized reconnaissance in the reviewed passages. AUV installation, OS permissions, and stored desktop evidence still require careful user control; external runtime implementations were not audited.

3
已扫描文件
117
分析行数
0
复核项
0
已忽略误报
最新一次完成的静态与语义审计未检测到已确认的安全发现。这并不能证明该 Skill 没有副作用。
审计者: codex
分享与引用此报告

分享版本化评估报告、中性徽章、嵌入卡片和引用。Skillstore 只报告证据,不判断该 Skill 是否安全。

打开版本化报告
安全评估

复制报告链接

https://skillstore.io/skills/0xselenicdove-auv-computer-control/audits/1?utm_source=security_passport&utm_medium=share&utm_campaign=versioned_report

Markdown 徽章

[![Skillstore security assessment](https://skillstore.io/badges/skills/0xselenicdove-auv-computer-control/security.svg)](https://skillstore.io/skills/0xselenicdove-auv-computer-control?utm_source=security_passport_badge)

HTML 徽章

<a href="https://skillstore.io/skills/0xselenicdove-auv-computer-control?utm_source=security_passport_badge"><img src="https://skillstore.io/badges/skills/0xselenicdove-auv-computer-control/security.svg" alt="Skillstore security assessment" loading="lazy"></a>

嵌入卡片

<iframe src="https://skillstore.io/embed/skills/0xselenicdove-auv-computer-control.html" title="Skillstore Security Assessment" sandbox="allow-popups allow-popups-to-escape-sandbox" loading="lazy" referrerpolicy="no-referrer" width="420" height="180"></iframe>
学术引用 (APA · BibTeX · CFF)

APA 引用

0xselenicdove. (2026). auv-computer-control security audit report (audit version 1) [Author version unspecified]. Skillstore. https://skillstore.io/skills/0xselenicdove-auv-computer-control/audits/1

BibTeX 引用

@techreport{0xselenicdove-0xselenicdove-auv-computer-control-2026, author = {0xselenicdove}, title = {auv-computer-control security audit report (audit version 1)}, institution = {Skillstore}, year = {2026}, number = {1}, url = {https://skillstore.io/skills/0xselenicdove-auv-computer-control/audits/1}, note = {Author version unspecified} }

CITATION.cff

cff-version: 1.2.0 message: "If you use this Skill, cite its author and this versioned security audit report." title: "auv-computer-control security audit report (audit version 1)" version: "unspecified" type: report authors: - name: "0xselenicdove" date-released: "2026-10-06" url: "https://skillstore.io/skills/0xselenicdove-auv-computer-control/audits/1" identifiers: - type: other value: "skillstore:0xselenicdove-auv-computer-control:audit:1" description: "Skillstore immutable audit report identifier"

Skillstore 评分

评分依据 证据置信度: 中
41
架构
85
可维护性
87
内容
65
社区
91
规范符合性

你能构建什么

Enter Information in a Native App

Observe the intended window, focus a field, enter approved text, and verify its complete value before submission.

Check Desktop Workflow Outcomes

Inspect application state after targeted actions and distinguish delivered input from a verified change.

Repeat an Authorized Remote Workflow

Preserve an observed Device target while turning a demonstrated workflow into a bounded, task-scoped operation.

试试这些提示

Check AUV Readiness
Check whether AUV is available and identify permissions needed for observing [app]. Do not install software or change permissions.
Fill and Verify a Field
In [app], locate [window] and enter [text] into [field]. Verify the full value without submitting, and stop if the target is ambiguous.
Recover from an Unverified Action
Inspect [app] after the previous action. Check partial progress and focus before proposing a retry. Do not repeat submission or other irreversible actions.
Reuse a Verified Remote Workflow
For authorized Device [device], inspect installed plugins for [verified workflow]. Propose task-scoped reuse with explicit targets, bounded waits, and independent checks.

最佳实践

  • Read installed command help and refresh observations before selecting a window, control, or remote Device.
  • Verify complete field values and final application state; stop before repeating actions with uncertain effects.
  • Use authorized targets and a controlled evidence directory; protect stored screenshots and output containing sensitive information.

避免

  • Reusing stale coordinates or identifiers after changing tools, windows, display scale, or remote targets.
  • Treating successful command delivery or a dry run as proof that the user goal was achieved.
  • Changing permissions, starting listeners, enrolling credentials, or retrying submissions without appropriate authorization.

常见问题

Does installing this skill install AUV?
No. AUV, its plugins, and required OS permissions are separate setup requirements.
Does the skill require MCP?
No. The CLI supports local core operations. An already connected MCP server can be used after discovering its actual tool schemas.
Which operating systems can it guide?
The references describe macOS, Linux, and Windows support. Individual commands and targeting options vary; installed help determines available behavior.
Which permissions may AUV need?
On macOS, operations may require Accessibility, Screen Recording, or Automation permissions. The user grants permissions; the skill forbids automatic changes.
Where is desktop evidence stored?
Default recording uses .auv/store under the working directory. A task-local store root can be selected; stored captures may contain sensitive data.
How does the skill confirm success?
It checks direct results and independently observes the application outcome. Delivered input alone is not treated as verified completion.

开发者详情

许可证

MIT

Skillstore 修订

r1

版本提示

作者未声明版本。

引用

e406bf64b5db6e514879399e87b346fa7ff7c2fb

维护新鲜度

2026/10/11

使用量

0 次下载 · 0 次浏览

文件结构

查看全部