ComputerUse

ComputerUse is a skill for Claude Code, Codex from danielmiessler/LifeOS. It costs 0 tokens per session (3,104 once invoked), scanned A, original, MIT.

A controlled way to operate a computer through web pages, accessibility controls, command-line tools, or APIs, with a separate visual route for tasks that expose only pixels. It chooses the route, limits what can be accessed, and requires a defined check of the result.

In plain words
What is it for?
Use it to drive a graphical interface, inspect or operate a page, run computer tasks through available controls, and supervise visual automation within allowed apps and limits.
Why use it?
It prevents the wrong automation method from being used and limits risky actions such as sending, buying, deleting, or publishing. It also prevents an automated agent from judging its own work without an independent check.

Skill for Claude CodeCodex

Written for no agent in particular: nothing here depends on one. Also seen: reads ~/.codex paths; runs codex exec; mentions AGENTS.md.

Good fit Use it to drive a graphical interface, inspect or operate a page, run computer tasks through available controls, and supervise visual automation within allowed apps and limits.

Compare 6 skills from other repositories ↓
Install with agentmods
npx agentmods add skills/danielmiessler/lifeos/computeruse
About the project

LifeOS is an AI-assisted personal operating system that records a person’s goals, values, context, and current situation to help move them toward a desired future state. It supports work such as building applications, starting businesses, and creative projects. Its catalogue entries extend the system through skills, hooks, agents, and commands.

danielmiessler/LifeOS · 19,637 stars · on GitHub · ourlifeos.ai

Install

Getting it into your agent

One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.

Any agent
npx skills add danielmiessler/LifeOS --skill computeruse
Clone the repo
git clone --depth 1 https://github.com/danielmiessler/LifeOS

Made for: Claude Code, Codex.

Wrote this? Show the measurements

A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.

agentmods badge for ComputerUse

README.md
[![agentmods](https://agentmods.dev/badge/skills/danielmiessler/lifeos/computeruse/github.svg)](https://agentmods.dev/skills/danielmiessler/lifeos/computeruse)
Your own site
<a href="https://agentmods.dev/skills/danielmiessler/lifeos/computeruse"><img src="https://agentmods.dev/badge/skills/danielmiessler/lifeos/computeruse/github.svg" alt="Measured on agentmods" height="20"></a>

Or the 80×15 button, for a site that already has a row of RSS and ATOM ones. Only the verdict fits; the numbers stay here.

agentmods 80×15 button for ComputerUse

Your own site · 80×15
<a href="https://agentmods.dev/skills/danielmiessler/lifeos/computeruse"><img src="https://agentmods.dev/badge/skills/danielmiessler/lifeos/computeruse.svg" alt="Reviewed on agentmods" width="80" height="20"></a>
Per session 0 Skills are progressive disclosure: only the name and description are preloaded; the body loads when the skill is used.
When invoked 3,104 The whole file, excluding the scripts and references it only reads on demand.
Security scan A 0 findings. A grade says what 26 rules found in the file — not that it is safe.
Origin original No closer match found in the catalogue.
Token cost

What it costs to keep this loaded

Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.

ModelPer sessionOnce invoked
Fable 5.1 $0.00000 $0.03104
Opus 5.5 $0.00000 $0.01242
Sonnet 5.5 $0.00000 $0.00621
Haiku 4.5 $0.00000 $0.00310

Measured 2d ago against content hash 01cc07dfccd2, method: parsed. Prices are Anthropic first-party input rates as of 2026-10-07, from the pricing page.

Security

Grade A, and why

ComputerUse scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 2d ago.

The scan reads SKILL.md. This mod also ships 6 executable files (Tools/BakeOff.ts, Tools/ClaudeLeg.ts, Tools/Probe.ts, …), listed below but not scanned — reading those needs a real analyzer, not pattern matching.

A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.

Nothing flagged

None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.

LifeOS/install/skills/ComputerUse/SKILL.md · 110 lines

How it starts

The opening of the file, as written. The whole thing — 110 lines — stays where its author put it; the contents beside it link to each section on GitHub.

ComputerUse

Contents: Ideal State · Intent Routing · The routing table · The supervised run · Data & Config · Gotchas · Examples

One skill routes every computer-use task by a rule you can read, then supervises the run so the vision leg never grades itself, never sees what it must not, and never runs away.

Ideal State

  • Every task is routed by the readable rule before anything runs: verification and anything with a DOM, AX, CLI or API handle go to Interceptor, and only pixel-only work goes to the measured vision pick.
  • A vision run's verdict comes only from its declared verifier, never from the agent's own report, and no run starts without one.
  • The vision leg never sees a running credential app, a visible communications app or a denied host, never acts outside its allowlisted app, and stops at its step and wall-clock caps.
  • Send, buy, delete, publish or confirm happens only when the principal named that exact action, and every refusal is reported rather than worked around.

Intent Routing

Intent Trigger File
Drive "do this in the GUI", "drive ", "computer use for " Intents/Drive.md
Probe "is Astra computer use working", "probe the vision leg" Intents/Probe.md
BakeOff "bake-off", "which vision agent is better", "Claude vs OpenAI computer use", "re-score the vision legs" Intents/BakeOff.md
File Read when
Instructions.md changing what the Astra leg is told; the runner passes it as model_instructions_file on every spawn
Config.example.md setting up the deny lists, caps and Focus shortcuts in the USER Config.md
Tests/ changing routing, deny rules, caps or spawn flags (fixtures under Tests/fixtures/ are synthetic; source tree only, not in the release payload)
Setup.md first-time setup: the Config.md fields, the Codex app and plugin, permissions, and a dry-run proof
References/VisionLegs.md changing or debugging how the Astra or Claude leg is spawned and confined: codex flags, the Claude leg step loop, its tool restrictions, env drops, pixel-to-point mapping

Read the full file on GitHub · 110 lines

Changes

What this file has done since we first saw it

Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.

  1. 2d ago First seen · 110 lines · 0 tokens per session scan A 01cc07dfccd2

Subscribe to this mod's changes

ComputerUse is a skill published in the GitHub repository danielmiessler/LifeOS (19,637 stars, last pushed 2d ago), licensed MIT. It costs nothing until one of its globs matches a file; then it loads 3,104 tokens. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-10-28.

Related

Other skills, from other repositories

skillify

Codify the most recent successful /scrape flow into a permanent browser-skill on disk. Future /scrape calls with the same intent run the codified script in 200ms instead of re-driving the page. Walks back through the conversation, synthesizes script.ts + script.test.ts fixture, runs the test in a temp dir, and asks…

Global-mindee/WAY · 110 tokens

browser-use

Direct browser control via CDP for web interaction: automation, scraping, testing, screenshots, and site/app work. Also covers hosted cloud browsers for AI agents: the browser-use Python library (Browser(usecloud=True)), Playwright, Puppeteer or any CDP client.

browser-use/browser-use · 57 tokens

pinchtab-mcp

Use this skill when a task requires browser automation through PinchTab's MCP server connected to a remote browser instance. Covers navigation, element interaction, data extraction, form filling, multi-step flows, and session management via MCP tools.

pinchtab/pinchtab · 52 tokens

news-search

Search current news for a topic, company, competitor, or hook and return dated, attributed articles. Uses the newsjack CLI and Medialyst REST API when available, tries direct Medialyst MCP if the CLI is missing, and falls back to host web/browser search with explicit caveats only when neither cloud path is available.

elvisun/newsjack · 69 tokens

social-fetch

When you or another skill needs to fetch the content of a social media post by URL — tweet, X thread, LinkedIn post, Instagram post, TikTok video, Bluesky post, Reddit thread, Mastodon status, Threads post, Hacker News thread. Returns normalized structured data (author, postedat, text, engagement counts, media URLs…

coreyhaines31/makerskills · 216 tokens

desktop-act

Cross-OS computer-use MCP: multi-agent exclusive desktop leases, Xvnc pool on Linux, single-session macOS/Windows. Use for GUI/desktop automation and concurrent agent desktops.

Lifecycle-Innovations-Limited/claude-ops · 41 tokens