Skip to content
Back to skills

Docs

ASecurity

Use sleight through the local Mac shell for app and browser UI tasks.

  • 6 stars
  • 0 votes
  • 0 copies
  • 0 views
  • Added November 10, 2026
ai-agentsjavascriptjavashellbashapi

Works with

  • claude code
  • cli
  • api
  • mcp

Security analysis

A100/100

Pro scans all 15 files and shows the line behind each finding

Scanned November 10, 2026

npx -y skills add Land-o-Clusters/sleight --skill docs --agent claude-code

Installs into .claude/skills of the current project.

Are you the author of Docs?

Add the live security badge to your README. It updates with every re-scan.

Security grade badge for Docs
[![Security: A — Skills Directory](https://www.skillsdirectory.com/api/skills/land-o-clusters-docs/badge)](https://www.skillsdirectory.com/skills/land-o-clusters-docs)

More formats (shields.io, HTML) on the badges page. Keep it an A: scan every change in CI with Pro.

Download with Pro
SKILL.md
---
name: sleight-mac-ui
description: Use sleight through the local Mac shell for app and browser UI tasks.
---

# Mac UI through sleight

sleight is a Claude Code plugin that drives Mac apps through the computer-use engine bundled with ChatGPT.
Grok Bot reaches it through the local shell on the Mac. Its hosted MCP box cannot reach the Mac's apps.

Before installing this skill, replace `/absolute/path/to/sleight` below with the clone's full path on the Mac.
For Mac UI tasks, call this executable with JavaScript as one safely quoted shell argument:

```bash
/absolute/path/to/sleight/plugins/sleight/bin/sleight-mcp js 'await cua.getState()'
```

Read the engine API docs printed by the first call before taking further actions. Use only APIs those docs describe.
Keep JavaScript handles between calls. The session starts on demand and exits after ten idle minutes. When a restart
notice shows a different session ID, acquire the handles again and read the new first reply's docs. Treat a
"did not become ready" error as a possible reset too.
To reset JavaScript yourself, call the same full executable path with `js_reset`.

Screenshots and images return as local cache file paths. Read the printed file through the local file tool before the
session exits and prunes it. After an error or timeout, read current state before retrying input.

Use sleight for Mac computer use. Keep Grok Bot's own computer-use helper off so there is one driver.
Payments, bookings, settings changes and submits ask on sleight's panel. Stop and wait for the owner's click.
Do not answer that panel through computer use or edit sleight's approval files, pre-approved list or consent state.
Grok's local-tool approval settings do not answer sleight's panels.
Relay any "sleight: waiting for your approval on the Mac" line to the user. Wait for their answer without retrying the call.
Do not set `SLEIGHT_*` environment variables, write or load the LaunchAgent plist, or remove sleight's cache folder.

If access fails, run the same full executable path with `--doctor` through the local shell. Its Grok Bot section checks
whether sleight's native metadata helper has Accessibility in the live shell session, without requesting permission.
Report the missing grant to the owner. Never open System Settings, trigger a permission prompt or change approvals.

Files in this skill

  • assets/architecture-dark.svg9.2 KB
  • assets/architecture-light.svg9.2 KB
  • assets/sleight-icon-128.png20.1 KB
  • assets/sleight-icon-256.png47.7 KB
  • assets/sleight-icon-32.png2.4 KB
  • assets/sleight-icon-64.png6.6 KB
  • assets/sleight-icon-source.webp25.8 KB
  • assets/sleight-menu-glyph.svg1.1 KB
  • background.md7.3 KB
  • benchmark.md86.4 KB
  • benchmarks/2026-10-03-background-drag-abort.json685 B
  • benchmarks/2026-10-03-background-drag-cancel-front-change.json609 B
  • benchmarks/2026-10-03-background-drag-front-read-refusal.json1.1 KB
  • benchmarks/2026-10-03-background-drag-initial.json7.1 KB

Attribution

Is this your skill, or is something wrong with this listing? Request removal or report an issue. Author removals are honored within 72 hours.

View all in ai-agents →

Comments

Loading comments…

Newsletter

Get the weekly list of safe new skills, and the ones we pulled.