Desktop Control (Windows)

Control desktop applications on Windows — launch, close, focus, resize, move windows, simulate keyboard/mouse input, manage processes, control VSCode, read clipboard, and capture screen info. Use when the user wants to interact with any running program, switch windows, type text, press shortcuts, open files in VSCode, manage running processes, or get system display information.

Install only if you specifically want an agent to control your Windows desktop. Review the PowerShell scripts before renaming or running them, keep secrets off-screen and out of the clipboard before use, and require explicit confirmation for screenshots, clipboard reads, process killing, app launches, VS Code extension changes, and any typing or clicking in sensitive windows.

Type: OpenClaw Skill Name: desktop-control-win Version: 1.0.1 This skill bundle is classified as suspicious due to its extensive and low-level control over the Windows desktop environment, which, while potentially useful for legitimate automation, exposes significant security risks. The PowerShell scripts allow for arbitrary process execution (`Start-Process` in `app-control.ps1`, `process-manager.ps1`), full keyboard and mouse input simulation (`input-sim.ps1`), reading clipboard content, taking screenshots (`screen-info.ps1`), and installing/uninstalling VSCode extensions (`vscode-control.ps1`). These capabilities, especially clipboard access and screenshot capture, could be leveraged for data exfiltration or unauthorized actions if the AI agent is compromised via prompt injection, despite the 'Safety Rules' in `SKILL.md` attempting to guide responsible use. The explicit instruction in `SKILL.md` to use `powershell -ExecutionPolicy Bypass` further highlights the elevated risk.