Capability drift in Harusame64/desktop-touch-mcp

github Harusame64/desktop-touch-mcp C

Windows computer-use MCP server: drive any desktop app via semantic discover-then-act targeting (entities + leases, not pixel coordinates), with per-action perception guards, a native Rust UIA engine, Chrome CDP, and Key Locker credential autofill for ssh/sudo password prompts. Works with Claude, Cursor, and any MCP client.

maintainer: Harusame64
tools: 35
CVEs: 0
releases: 85

advisory #779003

HIGH Harusame64/desktop-touch-mcp 08-22 21:18

code analysis flagged dynamic code execution in Harusame64/desktop-touch-mcp

current permission surface (inferred):

drift timeline for Harusame64/desktop-touch-mcp → security tab →

drift history for this server newest 8

HIGH 09-08 03:23 code analysis flagged dynamic code execution in Harusame64/desktop-touch-mcp
HIGH 09-07 23:44 code analysis flagged dynamic code execution in Harusame64/desktop-touch-mcp
HIGH 09-03 18:06 code analysis flagged dynamic code execution in Harusame64/desktop-touch-mcp
HIGH 09-01 01:35 code analysis flagged dynamic code execution in Harusame64/desktop-touch-mcp
HIGH 08-29 14:27 code analysis flagged dynamic code execution in Harusame64/desktop-touch-mcp
HIGH 08-25 00:17 code analysis flagged dynamic code execution in Harusame64/desktop-touch-mcp
HIGH 08-23 22:27 code analysis flagged dynamic code execution in Harusame64/desktop-touch-mcp
HIGH 08-22 21:18 code analysis flagged dynamic code execution in Harusame64/desktop-touch-mcp you are here

This server has drifted again since this advisory — a dated claim is a snapshot, not a current state.