windows-desktop-e2e
Pass
Audited by Gen Agent Trust Hub on Aug 12, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements a tiered isolation model for testing. Tier 1 uses environment variable redirection (APPDATA, LOCALAPPDATA, TEMP) to provide filesystem isolation for each test run.
- [SAFE]: Tier 2 isolation utilizes Windows Job Objects to ensure process-lifetime containment and prevent orphan child processes, which is a defensive coding practice.
- [SAFE]: Command execution via
subprocess.Popenis used appropriately for launching the application under test and supporting tools like ffmpeg. It correctly usesshlex.splitfor argument parsing to avoid common command injection vulnerabilities. - [SAFE]: The tracing feature is designed with privacy in mind, defaulting to redacting typed text in logs to prevent the accidental exposure of PII or credentials.
- [SAFE]: All identified dependencies and external tools (pywinauto, pytest, Pillow, opencv-python, winget, ffmpeg) are standard, reputable, and sourced from official repositories or well-known services.
Audit Metadata