heytea-doodle-poster
Pass
Audited by Gen Agent Trust Hub on Sep 5, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONDYNAMIC_EXECUTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill downloads project dependencies from the official NPM registry and utilizes system package managers such as Homebrew (macOS) or Winget (Windows) to install Node.js as required for the desktop pet functionality.
- [COMMAND_EXECUTION]: Python scripts use the subprocess module to manage the local build environment, install dependencies, and adjust file system attributes, including clearing macOS quarantine bits and applying ad-hoc signatures for locally built executables.
- [DYNAMIC_EXECUTION]: The skill facilitates the compilation and packaging of a native Electron application from bundled source code and subsequently launches it to provide an interactive desktop companion as described in its core purpose.
Audit Metadata