pyautogui

Cross-platform mouse/keyboard automation skill. Supports mouse control (move/click/drag/scroll), keyboard control (key press/hotkeys/type text), screen opera...

This package appears to be a straightforward PyAutoGUI-based automation toolkit and is internally consistent. Before installing/running it: 1) review and run the scripts in a safe environment (they can move the mouse, type, and delete files); use the cleanup script in preview mode first (--execute required to actually delete). 2) Be aware RapidOCR/onnxruntime may download or require large model files on first use and may use network/disk resources. 3) Granting accessibility/input permissions (macOS) or running with elevated rights (Windows) may be required for full functionality — avoid running with higher privileges than necessary. 4) If you plan to allow autonomous agent invocation, remember the skill can operate the UI—only enable autonomous use if you trust the skill and its source.

Type: OpenClaw Skill Name: pyautogui Version: 1.2.0 The skill bundle provides extensive UI automation and image processing tools using PyAutoGUI, OpenCV, and RapidOCR. While the functionality is consistent with the documentation, the bundle is classified as suspicious due to the inherent high-risk nature of providing an AI agent with full mouse, keyboard, and screen capture capabilities. Additionally, several scripts (e.g., scripts/keyboard_mouse.py, scripts/image_utils.py, and scripts/cleanup.py) lack input sanitization for file paths, which could potentially be leveraged for unauthorized file writes or deletions of specific file patterns. No evidence of intentional malicious behavior or data exfiltration was observed.