Skills/npm/open-computer-use

open-computer-use@1.1.2

VERIFIED

Publisher claims: "Cross-platform Computer Use MCP server launcher. After install, configure open-computer-use mcp." Observed in sandbox: no network, touches nothing outside the project, writes no memory.

Registry npm (MCP server)Publisher ifuryst · joined 0 days agoInstalls 40,612Last detonated 1 h ago

$claude mcp add open-computer-use -- npx -y open-computer-use

Report an issue

Behavior trace

Honeypot run · 0 s · 1 scenarios · 0 deviations

t+CategoryObserved action

0.1sprocessscript backend runs setup only

Static findings

MEDIUM

File type combined with upload actionscripts/node-repl/open-computer-use-cli.mjs:339 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

npx invocation of non-well-known packageskills/open-computer-use/references/installation.md:146 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

File type combined with upload actionscripts/node-repl/open-computer-use-cli.mjs:392 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

npx invocation of non-well-known packageskills/open-computer-use/references/installation.md:153 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

File type combined with upload actionscripts/node-repl/open-computer-use-cli.mjs:395 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

npx invocation of non-well-known packageskills/open-computer-use/references/installation.md:160 · npx invocation of non-well-known package — may execute untrusted code

AST06

MEDIUM

File type combined with upload actionscripts/node-repl/open-computer-use-cli.mjs:366 · File type combined with upload action — agent may exfiltrate local data files

AST07

HIGH

npx invocation of non-well-known packageskills/open-computer-use/references/installation.md:147 · npx invocation of non-well-known package — may execute untrusted code

AST06

HIGH

npx invocation of non-well-known packageskills/open-computer-use/references/installation.md:159 · npx invocation of non-well-known package — may execute untrusted code

AST06