baoyu-electron-extract
Pass
Audited by Gen Agent Trust Hub on Jun 26, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: Uses
npxto download and execute standard developer utilities, specifically@electron/asarfor bundle extraction andprettierfor code formatting. - [COMMAND_EXECUTION]: Searches local system directories such as
/Applications(macOS) and%PROGRAMFILES%(Windows) to identify and inspect installed Electron application bundles. - [SAFE]: Implements strict output path validation (
assertSafeOutputDir) that prevents the tool from writing to sensitive locations including the root directory, the user's home directory, or the current working directory. - [SAFE]: Employs sanitization and path resolution logic (
restoredTargetPath,isSafeRelativePath) when reconstructing source files from maps to ensure all written data remains confined within the designated output folder and prevents directory traversal attacks.
Audit Metadata