gui — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited gui (Agent Skill) and scored it 100/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 0 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 0 flagged
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
gui — cross-driver GUI actuationWhenever the active driver runs with ui_mode=gui (or desktop), sim serve injects a `gui` object into your sim exec namespace alongside session / solver / meshing / model. The object is the same shape across solvers — only the process filter differs — so one skill serves every GUI-capable driver.
/connect advertises it:
{
"ok": true,
"data": {
"...": "...",
"tools": ["gui"],
"tool_refs": {"gui": "sim-cli/_skills/sim-cli/gui/SKILL.md"}
}
}If tools doesn't contain "gui", the driver launched headless and the object is absent — don't call it.
guiThree scenarios dominate:
overwrite confirmation, or script-error dialog can pause agent work until someone clicks a button — that someone is you, via gui.
expose a UI-only surface that the driver API does not cover.
sim screenshot captures thewhole desktop. SimWindow.screenshot() captures just the window you care about — cheaper to read, less visual clutter for the LLM.
If the SDK has a programmatic path (session.tui.*, model.solve(), ModelUtil.loadCopy()), prefer that. gui is for the UI-only surface that the SDK doesn't cover.
gui is in the session namespace on the sim serve side. You talk to it via the existing /exec HTTP channel:
# local Windows box
sim exec "dlg = gui.find('Login'); dlg.click('OK')"
# Windows box on the LAN / Tailscale
sim --host 10.0.x.y exec "dlg = gui.find('Login'); dlg.click('OK')"No new endpoint, no new protocol — the same API shape from anywhere the agent runs.
Requirement on the server host: sim serve must run in a real interactive desktop session (normal login or RDP). Windows service / SSH session 0 has no desktop, so pywinauto can't enumerate any windows even though the solver processes are running. This is the same constraint GUI-capable drivers document.
gui.available # True iff pywinauto can run — check before driving anything
gui.process_filter # tuple of process-name substrings this gui will target
gui.list_windows() # {ok, windows: [{hwnd, pid, proc, title, rect}, ...]}dlg = gui.find(title_contains="Login", timeout_s=5)
# returns a SimWindow, or None on timeouttitle_contains is a plain substring match (case-sensitive, any language). Returns None if nothing matched — always check before calling methods on it:
dlg = gui.find("连接到")
if dlg is None:
_result = {"ok": False, "error": "login dialog not visible"}
else:
dlg.click("确定")Every action returns {ok: bool, ...}. No exceptions unless you pass invalid Python types — surface ok=False + error to the agent.
dlg.click("OK", timeout_s=5) # click a button by accessible name
dlg.send_text("alice", into="Username") # type into a named Edit field
dlg.send_text("/tmp/out.cas.h5") # without `into` → first editable
dlg.close() # WM_CLOSE (Alt+F4 equivalent)
dlg.activate() # bring to foreground
dlg.screenshot(label="after_login") # window-only PNG under workdirEach action method tries the most natural pywinauto strategy first (button_by_title) and falls back to a broader match (any_control_by_title) before giving up — the response tells you which path worked via the strategy field.
Expensive but sometimes necessary for reasoning about an unfamiliar GUI:
state = gui.snapshot(max_depth=3)
# {ok, windows: [{hwnd, pid, proc, title,
# controls: [{name, control_type, handle, children?}, ...]}]}Use this when find(title) misses and you need to see what the GUI actually exposes.
SimWindow fields you can read without another round-trip:
dlg.hwnd # int
dlg.pid # int
dlg.proc # str, process name
dlg.title # current window title
dlg.as_dict() # {hwnd, pid, proc, title, rect}dlg = gui.find(title_contains="Login", timeout_s=5)
if dlg:
dlg.send_text("alice", into="Username")
dlg.send_text("secret", into="Password")
dlg.click("OK")
_result = {"dismissed": dlg is not None}dlg = gui.find(title_contains="Question", timeout_s=3)
if dlg is None:
dlg = gui.find(title_contains="overwrite", timeout_s=3) # other
if dlg:
dlg.click("OK")
_result = {"confirmed": dlg is not None, "title": dlg.title if dlg else None}state = gui.snapshot(max_depth=4)
names = []
def walk(items):
for c in items:
if c.get("name"):
names.append((c["control_type"], c["name"]))
walk(c.get("children") or [])
for w in state["windows"]:
walk(w.get("controls") or [])
_result = {"control_names": names[:50]}dlg = gui.find(title_contains="Main", timeout_s=3)
if dlg:
shot = dlg.screenshot(label="after_solve")
_result = shot # contains {ok, path, width, height}
else:
_result = {"ok": False, "error": "main window not found"}Every call returns a dict; failures look like {"ok": False, "error": "connect(handle=...) failed: ..."}. The UIA machinery runs in an isolated subprocess so a COM glitch in one call never poisons the next.
Things that commonly make ok false:
| Symptom | Likely cause | What to do |
|---|---|---|
find returns None | title didn't match / process filter too strict | print gui.list_windows() to see what is live |
click says no control titled ... in hwnd=... | the button label in the UI is not what you think | snapshot the window, read controls[*].name |
screenshot returns minimal PNG | window is minimized (pywinauto captures the window rect; min'd windows live at (-32000, -32000, …)) | dlg.activate() first, then screenshot |
gui.available is False | off-Windows host, or pywinauto not installed | don't use gui — fall back to SDK-only path |
list_windows() returns [] even though the solver clearly launched | sim serve was started from an SSH / non-interactive Windows session — the GUI exists in a session with no display surface and pywinauto can't see it | ask the operator to restart sim serve from a desktop session (RDP, Windows Terminal, or Task Scheduler with "run only when user is logged on" + interactive). See ../SKILL.md → "Where sim serve runs". Do not retry. |
screenshot returns a uniformly black PNG | same as above — non-interactive session has no compositor | same fix |
gui.snapshot() to confirm the actual accessible name before calling click(name).
panels. find(title) returns the first match; if the workflow is ambiguous, use list_windows() and pick by pid.
session,model) are always faster and more reliable than UI clicks. gui is the fallback for the UI-only surface.
sim serve runs from anSSH session, a Windows service, or any non-interactive context, the spawned solver process inherits a session with no display surface. pywinauto then finds zero windows, screenshots come back uniformly black, and find(...) silently times out — the server itself is up and reachable, only the GUI half is dead. Restart sim serve from a desktop session (Windows Terminal on the console, RDP, or Task Scheduler with "run only when user is logged on" + interactive). See ../SKILL.md → "Where sim serve runs" for the full driver-by-driver matrix.
to pop. Check those for recipes before inventing your own.
sim.inspect probes (issue #8a window_observed, #8b screenshots)tell you what is on screen — read them first, then reach for gui to act.
~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.