Desktop Automation Protocol
How to use windows-computer-use-mcp effectively — tool selection, focus rules, safety, and mission design.
Install
$ agentstack add skill-hybridlabor-api-bdb-dev-optimized-agent-skills-desktop-automation-protocol ✓ scanned · ✓ verified, works with Claude Code, Cursor, and more.
Security review
✓ PassedNo issues found. Passed automated security review. · v0.1.0 How review works →
- ✓ Prompt-injection patterns
- ✓ Secret / credential exfiltration
- ✓ Dangerous shell & filesystem operations
- ✓ Untrusted network calls
- ✓ Known-malicious package signatures
What it can access
- ✓ Network access No
- ✓ Filesystem access No
- ✓ Shell / process execution No
- ✓ Environment & secrets No
- ✓ Dynamic code execution No
From automated source analysis of v0.1.0. “Used” means the capability is present in the source — more access means more to trust, not that it’s unsafe.
Verified badge
Passed review? Show it. Paste this badge into your README, it links to the public security report.
Links to your public security report.[](https://agentstack.voostack.com/security/report/skill-hybridlabor-api-bdb-dev-optimized-agent-skills-desktop-automation-protocol) Reliability & compatibility
Declared compatibility
Compatibility is declared by the source manifest. End-to-end runtime verification is coming, see below.
We're building live execution health for every listing: tool-call success rate, median latency, uptime, and last-checked timestamps, measured, not self-reported. It isn't live yet, so we don't show numbers we can't stand behind.
How agent discovery & health will work →About
Desktop automation protocol (windows-computer-use-mcp)
Tool selection guide
| Goal | Tool | Example | |------|------|---------| | Click a known button | automation_elements(click, title="Save") | fast, needs exact title | | Click by intent | automation_smart(click="the Save button") | slower, finds across all windows | | Complex multi-step | automation_mission(run="save file as PDF") | autonomous loop with retry | | Record + replay | automation_macro(record) → stop → replay | repeatable sequences | | Wait for event | automation_watch(start, "window_appears", "Update") | event-driven triggers | | Explore desktop | automation_smart(discover) | get all running apps | | Extract + chain | automation_mission(workflow, actions, store_as, dollar-ref) | cross-app data pipeline |
Focus rules
- After automation starts, do not Alt+Tab or touch the mouse
- The target window must stay in foreground during click/type sequences
- If HITL approval appears, approve it and let the target window regain focus
- Prefer reading logs between paused steps or on a second monitor
Safety
- Read docs/SAFETY.md before production use
- Pair with virtualization-mcp for sandbox/VM isolation when running untrusted automation
- Opt-in features (face, keylogger) are off by default — enable only when needed
Mission design (automation_mission)
For run operation: provide a clear, concrete goal. The server decomposes via LLM sampling. For workflow operation: provide explicit steps with tool, params, label, and optional storeas/dollar-ref for data chaining. For self-healing: set apppath on steps so the mission can re-launch crashed apps.
Source & license
This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.
- Author: hybridlabor-api
- Source: hybridlabor-api/bdb-dev-optimized-agent-skills
- License: Apache-2.0
Install and usage instructions live in the source repository linked above.
Reviews
No reviews yet, be the first.
Write a review
Versions
- v0.1.0 Imported from the upstream source.