The Agent Skills Directory

[COMMAND_EXECUTION]: The scripts/patch_bundle.py script includes a function to repack ASAR archives using subprocess.run. This function invokes the @electron/asar utility through npx using a list of arguments, which is a secure practice that avoids shell injection risks.
[DATA_EXPOSURE]: Tools within the skill, such as quick_scan.py and analyze_webpack.py, are designed to locate hardcoded secrets, API keys, and endpoint configurations within the target application. These scripts only search for patterns within the analyzed project files and do not expose or exfiltrate the user's environment credentials.
[INDIRECT_PROMPT_INJECTION]: The gen_report.py script processes data from external files (like package.json) to generate markdown reports. While this involves ingesting untrusted content, the data is used solely for descriptive purposes in documentation and does not influence the agent's execution flow or safety boundaries.

re-electron-skill