run-desktop

This module is primarily a UI test/automation wrapper, but it includes high-impact security-relevant capabilities: (1) conditional arbitrary JavaScript execution in the page context via window.evaluate + eval driven by the --eval CLI flag, and (2) it disables Electron sandboxing (ELECTRON_DISABLE_SANDBOX='1') for the launched app, increasing the potential impact of any renderer-level code execution. It also allows the caller to choose the screenshot output path (--out) and may disclose UI content via console logging. In the absence of strict trust controls on CLI inputs and environment, the combination of eval + sandbox disable is the dominant risk signal.