install-desktop
Pass
Audited by Gen Agent Trust Hub on Nov 3, 2026
Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
- [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using
pnpmto install dependencies, build the application, and perform local installations. - Evidence:
pnpm desktop:install-local,pnpm install --frozen-lockfile, andpnpm desktop:build-releasecommands. - [DYNAMIC_EXECUTION]: The process involves building an application from source, which includes compilation and bundling using Node.js, Go, and Xcode tools.
- Evidence: References to Go, Xcode tools, and the build-release script that generates an ad-hoc application package.
- [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local source code and external configuration files (e.g.,
/absolute/install-mac-local.json) to define build parameters, which represents an attack surface if those files contain malicious instructions. - Ingestion points: Local source tree files and user-provided JSON configuration files.
- Boundary markers: None explicitly mentioned for the configuration files.
- Capability inventory: The skill can write files to the system via the build process and execute scripts defined in the project's
package.json. - Sanitization: Not explicitly detailed; the skill relies on the
localInstallConfigSchemafor input validation.
Audit Metadata