bytedance/UI-TARS-desktop server
gui automation
UI-TARS Desktop is a desktop application that runs GUI agents locally or remotely to automate computer and browser interactions. It uses the UI-TARS vision model to understand and control desktop interfaces through a native graphical interface.
Automate desktop and browser tasks by having an AI agent visually understand and interact with your screen Run local operators on your machine or connect to remote computers and browsers without additional configuration Execute complex multi-step workflows like booking flights, hotels, or generating charts through natural language instructions Integrate with the broader Agent TARS ecosystem for CLI and Web UI execution modes 2 CRITICAL✓ 3 HIGH✓ 25 MEDIUM 7 LOW 1 INFO
✓ CRITICAL/HIGH reflect AI-verified findings (false positives excluded) · MEDIUM/LOW/INFO are unverified scanner output
AI-verified (CRITICAL/HIGH): 5 likely real (100%) 1 false positive — excluded from CRITICAL/HIGH count above
Findings by checker · 3 high-signal
CHK-125 3 findings 2 likely 1 false positive
33% FP CHK-081 2 findings 2 likely
0% FP CHK-129 1 finding 1 likely
0% FP 38 findings click to expand
CHK-081 Command injection risk — exec/execSync with string interpolation in multimodal/tarko/agent-cli/src/core/commands/start.ts
multimodal/tarko/agent-cli/src/core/commands/start.ts
AI: likely real confirmed ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in multimodal/tarko/agent-cli/src/core/commands/global-workspace.ts
multimodal/tarko/agent-cli/src/core/commands/global-workspace.ts
AI: likely real confirmed ▼
CHK-129 Sensitive field in return type/schema — Token: str
apps/ui-tars/src/main/remote/subscriptionClient.ts
AI: likely real likely ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in commands/start.ts
multimodal/tarko/agent-cli/src/core/commands/start.ts
AI: likely real likely ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in commands/global-workspace.ts
multimodal/tarko/agent-cli/src/core/commands/global-workspace.ts
AI: likely real likely ▼
CHK-125 subprocess module — arbitrary shell execution — no scope constraint in commands/dev.ts
infra/pdk/src/commands/dev.ts
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in src/exec-utils.ts
packages/agent-infra/mcp-servers/commands/src/exec-utils.ts
possible ▼
CHK-125a fs.writeFile — unrestricted file write — no scope constraint in scripts/sync-docs.ts
packages/ui-tars/sdk/scripts/sync-docs.ts
possible ▼
CHK-125b sudo invocation — privilege escalation — no scope constraint in workflows/benchmark.yml
.github/workflows/benchmark.yml
possible ▼
CHK-125a fs.unlinkSync — file deletion — no scope constraint in main/logger.ts
apps/ui-tars/src/main/logger.ts
possible ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in infra/pdk/src/utils/github.ts [build-script context]
infra/pdk/src/utils/github.ts
possible ▼
CHK-081 Command injection risk — exec/execSync with string interpolation in infra/pdk/src/utils/build.ts [build-script context]
infra/pdk/src/utils/build.ts
possible ▼
CHK-053 Tool 'skychx' — unusually long description (557 chars)
multimodal/websites/main/src/data/showcaseData.ts
possible ▼
CHK-125a fs.writeFile — unrestricted file write — no scope constraint in src/benchmark-runner.ts
multimodal/benchmark/content-extraction/src/benchmark-runner.ts
possible ▼
CHK-125 execSync() — synchronous shell execution — no scope constraint in cli/rslib.config.ts
multimodal/agent-tars/cli/rslib.config.ts
possible ▼
CHK-125a fs.unlinkSync — file deletion — no scope constraint in cli/start.ts
multimodal/gui-agent/cli/src/cli/start.ts
possible ▼
CHK-125 execSync() — synchronous shell execution — no scope constraint in agent-cli/rslib.config.ts
multimodal/tarko/agent-cli/rslib.config.ts
possible ▼
CHK-125b chmod — permission modification — no scope constraint in agent-server/README.md
multimodal/tarko/agent-server/README.md
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in components/CodeBlock.tsx
multimodal/tarko/ui/src/components/markdown-renderer/components/CodeBlock.tsx
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in services/ShareService.ts
multimodal/tarko/agent-server-next/src/services/ShareService.ts
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in sqlite/SQLiteDAOFactory.ts
multimodal/tarko/agent-server-next/src/dao/sqlite/SQLiteDAOFactory.ts
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in tool-call-engine/PromptEngineeringToolCallEngine.ts
multimodal/tarko/agent/src/tool-call-engine/PromptEngineeringToolCallEngine.ts
possible ▼
CHK-125a fs.readFile — filesystem read access — no scope constraint in node/workspace-pack.ts
multimodal/tarko/context-engineer/src/node/workspace-pack.ts
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in storage/SQLiteStorageProvider.ts
multimodal/tarko/agent-server/src/storage/SQLiteStorageProvider.ts
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in services/ShareService.ts
multimodal/tarko/agent-server/src/services/ShareService.ts
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in Markdown/CodeBlock.tsx
multimodal/websites/main/src/render/components/Markdown/CodeBlock.tsx
possible ▼
CHK-125a fs.writeFile — unrestricted file write — no scope constraint in scripts/build-readability.ts
packages/agent-infra/shared/scripts/build-readability.ts
possible ▼
CHK-125 exec() — arbitrary code execution — no scope constraint in browser/readability-script.ts
packages/agent-infra/shared/src/browser/readability-script.ts
possible ▼
CHK-125a fs.writeFile — unrestricted file write — no scope constraint in src/utils.ts
packages/agent-infra/mcp-servers/filesystem/src/utils.ts
possible ▼
CHK-125a fs.writeFile — unrestricted file write — no scope constraint in src/server.ts
packages/agent-infra/mcp-servers/filesystem/src/server.ts
possible ▼
CHK-125c fetch() with hardcoded URL — potential exfil — no scope constraint in RunMessages/ShareOptions.tsx
apps/ui-tars/src/renderer/src/components/RunMessages/ShareOptions.tsx
possible ▼
CHK-125c XMLHttpRequest — unconstrained HTTP — no scope constraint in Optimized/result.md
multimodal/benchmark/content-extraction/result/developer.mozilla.org_en-US_docs_Web_JavaScript_Re/Optimized/result.md
possible ▼
CHK-125c XMLHttpRequest — unconstrained HTTP — no scope constraint in Readability/result.md
multimodal/benchmark/content-extraction/result/developer.mozilla.org_en-US_docs_Web_JavaScript_Re/Readability/result.md
possible ▼
CHK-125c fetch() with hardcoded URL — potential exfil — no scope constraint in SideBar/share.tsx
apps/ui-tars/src/renderer/src/components/SideBar/share.tsx
possible ▼
CHK-131 [prepare] Install hook present — review required
packages/ui-tars/sdk/package.json
possible ▼
CHK-125c XMLHttpRequest — unconstrained HTTP — no scope constraint in CurrentMarkdown/result.md
multimodal/benchmark/content-extraction/result/developer.mozilla.org_en-US_docs_Web_JavaScript_Re/CurrentMarkdown/result.md
possible ▼
CHK-125c fetch() with hardcoded URL — potential exfil — no scope constraint in handlers/ai21.ts
multimodal/tarko/llm-client/src/handlers/ai21.ts
possible ▼
CHK-133 Real secret in example output block — Password value in example output [low-entropy — likely placeholder, verify manually]
packages/agent-infra/logger/README.md
possible ▼
▼ Show 1 false positive (3% of this view) Last scanned: Jul 12, 2026
More servers
google-gemini/gemini-cli 85
An open-source AI agent that brings the power of Gemini directly into your terminal.
106k★
skypilot-org/skypilot 85
obra/superpowers 85
Foundational skill pack by Jesse Vincent now in anthropics/claude-plugins-official. Includes ffuf web-fuzzing/pentest skill. Partial analysis done — full hook and plugin inspection pending. tier=T2
191k★
Significant-Gravitas/AutoGPT 85
AutoGPT is the vision of accessible AI for everyone, to use and to build on. Our mission is to provide the tools, so that you can focus on what matters.
186k★
nanocoai/nanoclaw 85
A lightweight alternative to OpenClaw that runs in containers for security. Connects to WhatsApp, Telegram, Slack, Discord, Gmail and other messaging apps,, has memory, scheduled jobs, and runs directly on Anthropic's Agents SDK
30k★
google-gemini/gemini-cli 85
An open-source AI agent that brings the power of Gemini directly into your terminal.
106k★
Scan your entire org's MCP deployment
2,500+ repos pre-scored. 22% carry CRITICAL findings.