baoyu-electron-extract

Pass

Audited by Gen Agent Trust Hub on Jul 13, 2026

Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
  • [COMMAND_EXECUTION]: The skill executes external utilities such as @electron/asar and prettier using npx. These commands are fundamental to the skill's purpose of decompiling applications and are invoked using secure process spawning methods that prevent shell injection.- [EXTERNAL_DOWNLOADS]: The script dynamically fetches required tools from the npm registry via npx during execution. These are established developer tools used for their intended functions.- [SAFE]: The script implements robust filesystem security measures, including checks to prevent writing to sensitive system directories and path normalization to ensure restored files stay within the designated output directory.
Audit Metadata
Risk Level
SAFE
Analyzed
Jul 13, 2026, 08:05 AM
Security Audit — agent-trust-hub — baoyu-electron-extract