computer-use-linux — independently scanned and version-tracked by SaferSkills.
SaferSkills independently audited computer-use-linux (Agent Skill) and scored it 96/100 (green). The audit ran 55 deterministic rules across Security, Supply Chain, Maintenance, Transparency, and Community; it found 0 high-severity and 1 lower-severity findings. The full rule-by-rule trace and per-finding evidence are below. Free, methodology-open.
Findings & checks · 1 flagged
A bulleted imperative like {match} tells the agent to never reveal, disclose, or mention something to the user. Used adversarially it can instruct the agent to hide its tool calls or lie about what it did — stripping the transparency a user relies on to trust the agent.
Every scanned point with the score it earned and what moved between them.
First recorded scan — no prior version to compare against.
The primary manifest — the file an agent reads to learn what this artifact does.
Use this skill when the task needs a portable Linux computer-use skill bundled with its own standalone runtime and MCP server.
linux-computer-use-skill project under the installed skill directory.node modules, or extracted app assetsAfter installation, assume the standalone project lives at:
~/.codex/skills/computer-use-linux/projectIf the user installed the skill under a custom CODEX_HOME, use that equivalent path instead.
Always build from the bundled project:
cd ~/.codex/skills/computer-use-linux/project
npm install
npm run buildcd ~/.codex/skills/computer-use-linux/project
node dist/cli.jsThe first real run will automatically create .runtime/venv and install the public Python dependencies.
0.1.1 fixes the shared system-key blocklist and tool capability typings so Linux builds use Linux-specific shortcut protections instead of a broken copied platform branch.screenshotFiltering: none, so action gating is handled at the MCP layer.~30 seconds. Free. No account. Every finding cites a rule and a line of evidence.