install-desktop

Pass

Audited by Gen Agent Trust Hub on Nov 3, 2026

Risk Level: SAFECOMMAND_EXECUTIONINDIRECT_PROMPT_INJECTIONDYNAMIC_EXECUTION
Full Analysis
  • [COMMAND_EXECUTION]: The skill instructs the agent to execute shell commands using pnpm to install dependencies, build the application, and perform local installations.
  • Evidence: pnpm desktop:install-local, pnpm install --frozen-lockfile, and pnpm desktop:build-release commands.
  • [DYNAMIC_EXECUTION]: The process involves building an application from source, which includes compilation and bundling using Node.js, Go, and Xcode tools.
  • Evidence: References to Go, Xcode tools, and the build-release script that generates an ad-hoc application package.
  • [INDIRECT_PROMPT_INJECTION]: The skill ingests data from local source code and external configuration files (e.g., /absolute/install-mac-local.json) to define build parameters, which represents an attack surface if those files contain malicious instructions.
  • Ingestion points: Local source tree files and user-provided JSON configuration files.
  • Boundary markers: None explicitly mentioned for the configuration files.
  • Capability inventory: The skill can write files to the system via the build process and execute scripts defined in the project's package.json.
  • Sanitization: Not explicitly detailed; the skill relies on the localInstallConfigSchema for input validation.
Audit Metadata
Risk Level
SAFE
Analyzed
Nov 3, 2026, 06:16 PM