claude-computer

The system is inherently high-risk as it grants an AI full control over a virtual machine, including arbitrary shell command execution, file system manipulation via `edit` and `bash` tools, and GUI interaction via `computer` tool. A critical vulnerability exists with `x11vnc` running without a password (`-nopw`) on port 5900, meaning anyone with network access to this port can gain full VNC control of the VM. Multiple ports are exposed (5900, 8501, 6080, 8080, 8000, 3000), increasing the attack surface. The `README.md` explicitly warns about these 'unique risks' including prompt injection, and advises running in a dedicated, minimal-privilege VM and limiting internet access. This makes the system unsuitable for untrusted environments or without stringent security measures.