cherry-electron-dev
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Uses local shell commands including
ps,lsof,kill,curl, andjqto discover, verify, and manage Electron processes within the current workspace. - [COMMAND_EXECUTION]: Executes the application via
pnpm debug, capturing logs into a local.contextdirectory for debugging and profiling. - [PROMPT_INJECTION]: Features an indirect prompt injection surface by instructing the agent to ingest application runtime data, including console logs, DOM structure, and network output, which could contain untrusted content during debugging sessions.
- [DATA_EXPOSURE]: Maintains a local tracking file
instance.jsoncontaining runtime metadata such as PIDs, ports, and Git HEAD, used purely for internal session management.
Audit Metadata