desktop-askpass
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill includes a bash script
scripts/askpass.shthat executes system-native binaries (osascripton macOS andzenityon Linux) to facilitate secure password entry. - [SAFE]: The primary purpose of the skill is to enhance security by ensuring that sensitive user credentials remain outside the agent's execution context and conversation history.
- [SAFE]: The implementation handles arguments securely; for example, on macOS, it passes the prompt and title to AppleScript via
argvto avoid script injection vulnerabilities. - [SAFE]: The script attempts to identify the parent process name (e.g., 'sudo' or 'ssh') using
psand includes it in the GUI dialog title, providing the user with transparency regarding which program is requesting the secret.
Audit Metadata