Getting it into your agent
One page per mod, every tool's command on it. A separate URL per tool would split the same page into five that compete with each other.
npx agentmods add skills/wimi321/macos-computer-use-skill/computer-use-macosnpx skills add wimi321/macos-computer-use-skill --skill computer-use-macosgit clone --depth 1 https://github.com/wimi321/macos-computer-use-skillWrote this? Show the measurements
A badge with what this costs and how it scanned, read live from this page, so it follows the numbers instead of freezing them. Markdown for a README, HTML for a documentation site or a project page.
[](https://agentmods.dev/skills/wimi321/macos-computer-use-skill/computer-use-macos)<a href="https://agentmods.dev/skills/wimi321/macos-computer-use-skill/computer-use-macos"><img src="https://agentmods.dev/badge/skills/wimi321/macos-computer-use-skill/computer-use-macos.svg" alt="Measured on agentmods" height="20"></a>What it costs to keep this loaded
Counted locally with the o200k_base tokenizer, which is exact for GPT models; Claude uses its own tokenizer and its counts differ. Treat this as one consistent yardstick across the catalogue rather than a bill. Prices are per million input tokens.
| Model | Per session | Once invoked |
|---|---|---|
| Fable 5 | $0.00037 | $0.00463 |
| Opus 5 | $0.00018 | $0.00231 |
| Sonnet 5 | $0.00007 | $0.00093 |
| Haiku 4.5 | $0.00004 | $0.00046 |
Grade A, and why
computer-use-macos scanned grade A with 0 findings against 26 rules in 11 categories — prompt injection, anti-refusal, data exfiltration, privilege escalation, supply chain, agent snooping, system-prompt leakage, SSRF and excessive agency — measured 5d ago.
A static scan of the body, not an audit. Every finding is printed with the line that produced it so you can judge whether it matters here. A mod is markdown that instructs an agent; that is exactly why what it instructs is worth reading.
Nothing flagged
None of the 26 patterns this scan looks for appear in this file: no shell pipes, no recursive deletes, no credential paths, no hidden text, no instruction-override or anti-refusal phrasing, no agent-config snooping. That is not a guarantee, it is the absence of the things that are checkable.
What it actually says
macOS Computer-Use Skill
Use this skill when the task needs a portable macOS computer-use skill bundled with its own standalone runtime and MCP server.
What this skill does
- uses the bundled
macos-computer-use-skillproject under the installed skill directory - builds the standalone MCP server
- lets the server auto-bootstrap its Python runtime on first launch
- avoids any dependency on local Claude binaries,
.nodemodules, or extracted app assets - stays explicitly macOS-only because the underlying desktop-control backend is macOS-specific
Default bundled project path
After installation, assume the standalone project lives at:
~/.codex/skills/computer-use-macos/project
If the user installed the skill under a custom CODEX_HOME, use that equivalent path instead.
Build
Always build from the bundled project:
cd ~/.codex/skills/computer-use-macos/project
npm install
npm run build
Run
cd ~/.codex/skills/computer-use-macos/project
node dist/cli.js
The first real run will automatically create .runtime/venv and install the public Python dependencies.
Validation notes
- On real macOS hosts, prefer validating typing through the MCP
typetool path, not only low-level helper calls. - Version
0.2.2routes ordinary macOS text input through clipboard paste when available, avoiding IME/input-source corruption seen with per-key typing under Chinese input methods.
Guardrails
- Treat this host as trusted-local only.
- Do not tell the user to search their local Claude install for binaries or hidden assets.
- Be explicit that this runtime is standalone and uses public dependencies only.
- Mention that the current runtime reports
screenshotFiltering: none, so action gating is handled at the MCP layer.
What ships with it
48 files beside SKILL.md in the same directory: the scripts, references and assets a skill reads on demand. Not counted in the per-session cost; read them before you install if any of them is executable.
- agents/openai.yaml 364 B
- project/.gitignore 40 B
- project/assets/hero.svg 5.0 KB
- project/CHANGELOG.md 1.3 KB
- project/CONTRIBUTING.md 1.2 KB
- project/examples/env.sh.example 233 B
- project/examples/mcp-config.json 290 B
- project/LICENSE 1.0 KB
- project/package-lock.json 56 KB
- project/package.json 1.1 KB
- project/README.ja.md 10 KB
- project/README.md 8.5 KB
- project/README.zh-CN.md 8.2 KB
- project/runtime/mac_helper.py 22 KB runs code
- project/runtime/requirements.txt 122 B
- project/src/cli.ts 256 B runs code
- project/src/computer-use/appNames.ts 3.0 KB runs code
- project/src/computer-use/common.ts 249 B runs code
- project/src/computer-use/computerUseLock.ts 3.2 KB runs code
- project/src/computer-use/drainRunLoop.ts 1.1 KB runs code
- project/src/computer-use/escHotkey.ts 907 B runs code
- project/src/computer-use/executor.ts 6.9 KB runs code
- project/src/computer-use/gates.ts 975 B runs code
- project/src/computer-use/hostAdapter.ts 1.8 KB runs code
- project/src/computer-use/inputLoader.ts 397 B runs code
- project/src/computer-use/pythonBridge.ts 3.6 KB runs code
- project/src/computer-use/swiftLoader.ts 397 B runs code
- project/src/lib/errors.ts 403 B runs code
- project/src/lib/execFileNoThrow.ts 883 B runs code
- project/src/lib/log.ts 428 B runs code
- project/src/lib/sleep.ts 110 B runs code
- project/src/lib/withResolvers.ts 260 B runs code
- project/src/server.ts 1.5 KB runs code
- project/src/session.ts 3.4 KB runs code
- project/src/vendor/computer-use-mcp/deniedApps.ts 18 KB runs code
- project/src/vendor/computer-use-mcp/executor.ts 3.0 KB runs code
- project/src/vendor/computer-use-mcp/imageResize.ts 3.4 KB runs code
- project/src/vendor/computer-use-mcp/index.ts 1.7 KB runs code
- project/src/vendor/computer-use-mcp/keyBlocklist.ts 5.0 KB runs code
- project/src/vendor/computer-use-mcp/mcpServer.ts 12 KB runs code
- project/src/vendor/computer-use-mcp/pixelCompare.ts 5.9 KB runs code
- project/src/vendor/computer-use-mcp/sentinelApps.ts 1.5 KB runs code
- project/src/vendor/computer-use-mcp/subGates.ts 469 B runs code
- project/src/vendor/computer-use-mcp/toolCalls.ts 135 KB runs code
- project/src/vendor/computer-use-mcp/tools.ts 26 KB runs code
- project/src/vendor/computer-use-mcp/types.ts 27 KB runs code
- project/tsconfig.json 422 B
- scripts/install.sh 258 B runs code
What this file has done since we first saw it
Hashed on every crawl. A supply-chain change to an agent config is a question of when, not whether, so the history is kept rather than the latest state alone.
- 5d ago First seen · 65 lines · 37 tokens per session scan A 8c3d4d96db2d
computer-use-macos is a skill published in the GitHub repository wimi321/macos-computer-use-skill (18 stars, last pushed 4mo ago), licensed MIT. It adds 37 tokens to every session and 463 once invoked, about $0.0002 per session on Opus 5. A static security scan graded it A with 0 findings. No closer match exists in the catalogue, so it is treated as the original; first seen 2026-08-30.
Other skills, from other repositories
computer-use-windows
Top-level Windows computer-use skill with a bundled standalone runtime that bootstraps itself without any local Claude installation, private native modules, or extracted app assets.
computer-use
Windows 桌面自动化执行规则。使用 screeninteractor 观察与操作原生桌面应用。.
web-navigator
Web 浏览器自动化路由规则。通过 webnavigator 将 Web 场景路由到 Playwright MCP 或 mcp-chrome。.
computer-use-linux
Top-level Linux computer-use skill with a bundled standalone runtime that bootstraps itself without any local Claude installation, private native modules, or extracted app assets.
macos-harness
Control a whole Mac from one persistent Python session with screenshots, PID-targeted input, an animated virtual pointer, targeted Apple Accessibility, Apple Events, Browser Harness CDP, and filesystem access. Use for native, Electron, browser, dialog, file, or cross-app tasks without moving the physical cursor or…
browser-control
Control web pages in an existing Chromium remote-debugging session with deterministic sagui commands or the browser-only AI Agent. Use when Claude Code needs to inspect tabs, observe semantic elements, navigate, click, type, send keys, scroll, or complete a browser goal through CDP without controlling native macOS UI…