desktop-askpass

Pass

Audited by Gen Agent Trust Hub on Oct 29, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill includes a bash script scripts/askpass.sh that executes system-native binaries (osascript on macOS and zenity on Linux) to facilitate secure password entry.
  • [SAFE]: The primary purpose of the skill is to enhance security by ensuring that sensitive user credentials remain outside the agent's execution context and conversation history.
  • [SAFE]: The implementation handles arguments securely; for example, on macOS, it passes the prompt and title to AppleScript via argv to avoid script injection vulnerabilities.
  • [SAFE]: The script attempts to identify the parent process name (e.g., 'sudo' or 'ssh') using ps and includes it in the GUI dialog title, providing the user with transparency regarding which program is requesting the secret.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 29, 2026, 06:02 AM