drive-desktop-app
Pass
Audited by Gen Agent Trust Hub on Sep 18, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSCOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [EXTERNAL_DOWNLOADS]: Fetches documentation from the vendor's official site (
docs.reticle.sh) and references the vendor's GitHub repository (github.com/reticlehq/reticle). - [COMMAND_EXECUTION]: Instructs the agent to initialize the environment using
npx @reticlehq/server@latest init, which executes the vendor's server package. - [INDIRECT_PROMPT_INJECTION]:
- Ingestion points: The skill reads IPC traffic payloads (
ipc://) and UI element content from the desktop application under test (SKILL.md). - Boundary markers: No explicit delimiters or instructions to ignore instructions embedded within the application's IPC traffic are provided.
- Capability inventory: The skill allows for the modification of configuration files (
vite.config.ts,electron/preload.cjs,tauri.conf.json) and execution of testing commands (SKILL.md). - Sanitization: There is no mention of sanitization or validation for the data ingested from the desktop application's UI or IPC boundary.
Audit Metadata