connect-chatcut-desktop
Pass
Audited by Gen Agent Trust Hub on Aug 30, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONPRIVILEGE_ESCALATION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill directs the agent to download installation artifacts from the vendor's official domain at
https://api.chatcut.io. This is consistent with the skill's primary purpose of installing the desktop companion app. - [COMMAND_EXECUTION]: The instructions involve using native operating system commands to mount DMG files, extract ZIP archives, and launch installers on macOS and Windows.
- [REMOTE_CODE_EXECUTION]: The skill facilitates remote code execution by design, as it downloads and initiates the execution of binary installers. Security risks are mitigated by the use of official vendor URLs and instructions to validate digital signatures.
- [PRIVILEGE_ESCALATION]: The skill acknowledges that installing software to protected directories (like
/Applications) or running installers may require elevated permissions and advises the agent to request only the necessary scoped approval from the host.
Audit Metadata