OpenClaw Desktop Control

Remote desktop control and automation. Capture screenshots, control mouse and keyboard, automate UI interactions. Supports VNC, RDP, and local desktop enviro...

This skill appears to be a desktop-automation tool, but there are red flags you should consider before installing: - Mismatched claims: SKILL.md advertises VNC/RDP support and files (vnc_client.py, rdp_client.py) that are not present in the package. Treat those advertised network features as unimplemented until verified. - Undeclared secrets: The docs recommend environment variables (DESKTOP_HOST, DESKTOP_PASSWORD) but the registry metadata doesn't declare or require them. Don't set credentials for this skill unless you confirm how/where they will be used and stored. - Powerful local privileges: The skill can capture screenshots, read/write arbitrary files, and simulate keyboard/mouse input. These are expected for desktop control but also allow stealthy data capture or unintended command execution (e.g., typing into a terminal). Only run on machines where you trust the skill and its operator. - Autonomous invocation risk: If you allow the agent to call this skill autonomously, it could take screenshots or manipulate the desktop without further prompts. If you need this functionality, restrict the skill to non-production, isolated environments and limit which agents/contexts can invoke it. Recommendations: - Review the full source (desktop_controller.py and scripts/main.py) to confirm implementations of file read/write and any networked clients before enabling. - If you need remote VNC/RDP support, request the missing modules or a version that actually implements them. - Do not provide real credentials or enable the skill on sensitive systems until you confirm where credentials are used and stored. - Prefer running this in a sandbox/VM and monitor stdout/network traffic the first time it runs to detect unexpected exfiltration.

Type: OpenClaw Skill Name: oc-desktop-control Version: 1.0.0 The skill provides extensive desktop automation capabilities, including full GUI control (mouse/keyboard) and arbitrary file read/write access via the `LocalDisplayController` class in `lib/desktop_controller.py`. While these features align with the stated purpose of 'Desktop Control,' the implementation lacks any path sanitization or safety constraints, allowing the agent to read or modify sensitive system files. Furthermore, the automation examples (e.g., `examples/create_file.txt`) demonstrate how the tool can be used to execute shell commands by typing into a terminal, effectively granting the agent shell access. Although no explicit evidence of malicious intent or data exfiltration was found, the broad, high-risk permissions make it a significant security concern.