# Desktop Automation Protocol

> How to use windows-computer-use-mcp effectively — tool selection, focus rules, safety, and mission design.

- **Type:** Skill
- **Install:** `agentstack add skill-hybridlabor-api-bdb-dev-optimized-agent-skills-desktop-automation-protocol`
- **Verified:** Yes — security-reviewed for prompt injection and unsafe behavior
- **Seller:** [hybridlabor-api](https://agentstack.voostack.com/s/hybridlabor-api)
- **Installs:** 0
- **Category:** [Agent Skills](https://agentstack.voostack.com/c/agent-skills)
- **Latest version:** 0.1.0
- **License:** Apache-2.0
- **Upstream author:** [hybridlabor-api](https://github.com/hybridlabor-api)
- **Source:** https://github.com/hybridlabor-api/bdb-dev-optimized-agent-skills/tree/main/mcps/windows-computer-use-mcp/skills/desktop-automation-protocol

## Install

```sh
agentstack add skill-hybridlabor-api-bdb-dev-optimized-agent-skills-desktop-automation-protocol
```

Requires the [AgentStack CLI](https://agentstack.voostack.com/docs/cli). Works with Claude Code, Cursor, and any MCP-compatible agent.

## About

# Desktop automation protocol (windows-computer-use-mcp)

## Tool selection guide

| Goal | Tool | Example |
|------|------|---------|
| Click a known button | `automation_elements(click, title="Save")` | fast, needs exact title |
| Click by intent | `automation_smart(click="the Save button")` | slower, finds across all windows |
| Complex multi-step | `automation_mission(run="save file as PDF")` | autonomous loop with retry |
| Record + replay | `automation_macro(record) → stop → replay` | repeatable sequences |
| Wait for event | `automation_watch(start, "window_appears", "Update")` | event-driven triggers |
| Explore desktop | `automation_smart(discover)` | get all running apps |
| Extract + chain | `automation_mission(workflow, actions, store_as, dollar-ref)` | cross-app data pipeline |

## Focus rules
- After automation starts, do not Alt+Tab or touch the mouse
- The target window must stay in foreground during click/type sequences
- If HITL approval appears, approve it and let the target window regain focus
- Prefer reading logs between paused steps or on a second monitor

## Safety
- Read docs/SAFETY.md before production use
- Pair with virtualization-mcp for sandbox/VM isolation when running untrusted automation
- Opt-in features (face, keylogger) are off by default — enable only when needed

## Mission design (automation_mission)
For `run` operation: provide a clear, concrete goal. The server decomposes via LLM sampling.
For `workflow` operation: provide explicit steps with tool, params, label, and optional store_as/dollar-ref for data chaining.
For self-healing: set app_path on steps so the mission can re-launch crashed apps.

## Source & license

This open-source skill is cataloged on AgentStack and links to its original source — we do not rehost the code.

- **Author:** [hybridlabor-api](https://github.com/hybridlabor-api)
- **Source:** [hybridlabor-api/bdb-dev-optimized-agent-skills](https://github.com/hybridlabor-api/bdb-dev-optimized-agent-skills)
- **License:** Apache-2.0

Install and usage instructions live in the source repository linked above.

## Pricing

- **Free** — Free

## Security capabilities

Automated source analysis of v0.1.0 — what this tool can access:

- **Network access:** no
- **Filesystem access:** no
- **Shell / process execution:** no
- **Environment & secrets:** no
- **Dynamic code execution:** no

*"Yes" means the capability is present in the source — more access means more to trust, not that it is unsafe.*


## Versions

- **0.1.0** — security scan: passed — Imported from the upstream source.

## Links

- Listing page: https://agentstack.voostack.com/l/skill-hybridlabor-api-bdb-dev-optimized-agent-skills-desktop-automation-protocol
- Seller: https://agentstack.voostack.com/s/hybridlabor-api
- Browse the marketplace: https://agentstack.voostack.com/browse

---
Listed on AgentStack — the marketplace for AI agent skills and MCP servers. Every listing is security-reviewed. Creators keep 70%.
