openclaw-computer

Enable OpenClaw to control and use the computer like a human. Use when: (1) User asks to open applications or files, (2) User needs to automate desktop tasks...

This skill appears to do what it claims: controlling mouse/keyboard, taking screenshots, recording, launching/killing apps and managing files. Before installing or running it: (1) review the included scripts (computer-use.sh, computer_use*.py) yourself — they invoke shell commands and can delete/move files and kill processes; (2) avoid running install/test steps with sudo on a production machine — use a disposable VM or sandbox first; (3) if you follow the SKILL.md git clone path, verify the remote repository and its integrity; (4) note that metadata omitted required system binaries (xdotool, scrot, wmctrl, xclip, ffmpeg), so ensure you only install the exact dependencies you trust; (5) if you need least privilege, restrict uses (don’t allow destructive commands) or run under a user account with limited access. If you want, I can highlight risky functions/lines in the code to inspect more closely.

Type: OpenClaw Skill Name: openclaw-computer-use-v2-0-0-tar Version: 1.0.0 The skill bundle provides extensive system control capabilities, including GUI automation, file management, and screen recording, which are inherently high-risk. While these align with the stated purpose, there is a significant discrepancy between the security claims in SKILL.md (e.g., sandbox mode and forbidden paths like ~/.ssh) and the actual implementation in computer_use.py and computer-use.sh, which lack these safeguards. Furthermore, computer-use.sh contains a potential shell injection vulnerability in the application launch logic ($name &). No evidence of intentional malice or data exfiltration was found.