baoyu-electron-extract
Pass
Audited by Gen Agent Trust Hub on Jul 13, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill executes external utilities such as
@electron/asarandprettierusingnpx. These commands are fundamental to the skill's purpose of decompiling applications and are invoked using secure process spawning methods that prevent shell injection.- [EXTERNAL_DOWNLOADS]: The script dynamically fetches required tools from the npm registry vianpxduring execution. These are established developer tools used for their intended functions.- [SAFE]: The script implements robust filesystem security measures, including checks to prevent writing to sensitive system directories and path normalization to ensure restored files stay within the designated output directory.
Audit Metadata