migrating-to-forward-frames
Pass
Audited by Gen Agent Trust Hub on Aug 25, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [PRIVILEGE_ESCALATION]: The instructions for Path A recommend a renderer configuration with
nodeIntegration: true,contextIsolation: false, andsandbox: false. Disabling these Electron security features allows the renderer process to access Node.js APIs and the host system directly, bypassing standard process isolation and increasing the severity of any potential cross-site scripting (XSS) or remote code execution (RCE) vulnerabilities. - [UNVERIFIABLE_DEPENDENCIES_AND_REMOTE_CODE_EXECUTION]: The skill references specific external Node.js packages, including
@napolab/texture-bridge-rendererand@napolab/texture-bridge-core. These appear to be vendor-provided libraries intended for GPU texture forwarding in Electron applications.
Audit Metadata