use-pywebview-htmx
Pass
Audited by Gen Agent Trust Hub on Mar 8, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill instructs the agent to build desktop UIs using a declarative binding system. It includes explicit warnings and instructions to escape untrusted values before interpolating them into HTML fragments, effectively addressing potential injection vectors.
- [SAFE]: Data handling patterns, such as form serialization and parameter encoding, are documented with a focus on safe implementation. The skill directs the use of built-in functions like
encode_params_attrto handle JSON escaping correctly. - [SAFE]: Python API methods are defined as privileged application logic, and the skill provides a clear contract for their interaction with the frontend, minimizing the risk of unauthorized or unsafe command execution.
Audit Metadata