📦 Control — 桌面自动化
v1.0.0精准操控鼠标键盘与屏幕，实现桌面级自动化任务，支持复杂脚本编排与实时状态反馈。
0· 1.3k·9 当前·10 累计
by 下载技能包
最后更新
2026/3/6
安全扫描
OpenClaw
可疑
medium confidenceNULL
评估建议
This package appears to be a legitimate desktop automation skill that implements the features described, but there are a few red flags to consider before installing and running it:
- Metadata mismatch: the registry owner/slug differ from the _meta.json inside the package. Confirm the author's identity and source before trusting the package.
- Manual dependency installation: the skill expects pyautogui, opencv-python, pygetwindow, pyperclip, etc. Install these in a contained environment (virtual...详细分析 ▾
ℹ 用途与能力
The name, description, SKILL.md, and code implement desktop automation (mouse, keyboard, screenshots, window management, clipboard). That functionality is coherent with the stated purpose. However there are metadata inconsistencies: the registry metadata (ownerId/slug) differs from _meta.json (different ownerId and slug 'desktop-control'), and the published skill's slug 'control' differs from package files. The skill contains code files (Python) but no install spec in the registry metadata — the SKILL.md instructs pip-install of several dependencies (pyautogui, opencv, pygetwindow, pyperclip), which is necessary but not declared in the registry. These mismatches could be harmless packaging issues but warrant scrutiny.
ℹ 指令范围
Runtime instructions and the code stay within desktop automation scope: move mouse, type text, take screenshots, manipulate clipboard, list windows, and run demo flows. The ai_agent component can plan and autonomously execute multi-step workflows (open apps, type, click, take screenshots). This is expected for this skill but grants broad local control (including the ability to type into any focused window, open apps, read/modify clipboard, and capture screen contents). The SKILL.md demos explicitly ask user to run sequences that will control the desktop — that's expected but high-impact.
ℹ 安装机制
No install spec is provided in the registry (lowest install risk), but the package includes Python code that imports pyautogui and the documentation instructs pip install of pyautogui, pillow, opencv-python, pygetwindow, pyperclip. Because the registry doesn't declare or bundle dependencies, users must install them manually. opencv-python and pyautogui may require native dependencies/permissions on some OSes. No remote downloads or URL-based installers were found.
ℹ 凭证需求
The skill declares no required environment variables or credentials, which is consistent with a purely local desktop-control tool. One uncertainty: ai_agent.py accepts an optional llm_client and comments that it will 'try to auto-detect' an LLM client — the visible code sets llm_client from an argument but truncated portions could attempt to discover/configure a model client or use system credentials. No explicit environment-variable reads or network endpoints are present in the visible code, but the potential LLM integration is a place to check for undeclared credential usage.
✓ 持久化与权限
The skill does not request always:true, and does not declare any persistent system-wide modifications. It can be invoked by the model autonomously (disable-model-invocation is false), which is the platform default; combined with its ability to act on the user's desktop this increases potential impact but is expected for an automation skill. The code does not appear to modify other skills' configs.
安全有层次，运行前请审查代码。
运行时依赖
无特殊依赖
版本
latestv1.0.02026/3/6
NULL
● 无害
安装命令
点击复制官方npx clawhub@latest install control
镜像加速npx clawhub@latest install control --registry https://cn.longxiaskill.com