use-pywebview-htmx

Pass

Audited by Gen Agent Trust Hub on Mar 8, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill instructs the agent to build desktop UIs using a declarative binding system. It includes explicit warnings and instructions to escape untrusted values before interpolating them into HTML fragments, effectively addressing potential injection vectors.
  • [SAFE]: Data handling patterns, such as form serialization and parameter encoding, are documented with a focus on safe implementation. The skill directs the use of built-in functions like encode_params_attr to handle JSON escaping correctly.
  • [SAFE]: Python API methods are defined as privileged application logic, and the skill provides a clear contract for their interaction with the frontend, minimizing the risk of unauthorized or unsafe command execution.
Audit Metadata
Risk Level
SAFE
Analyzed
Mar 8, 2026, 05:18 AM
Security Audit — agent-trust-hub — use-pywebview-htmx