electron-architect
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: No security issues detected. The skill provides architectural advice and a local script for project initialization.
- [COMMAND_EXECUTION]: The
scaffold-project.shscript automates the creation of files and directories (usingmkdirandcat). This is legitimate functionality for a project scaffolding tool and is executed locally. - [INDIRECT_PROMPT_INJECTION]: The scaffolding script interpolates user-supplied arguments (e.g., project name) into generated files. The script uses double-quoting to mitigate basic injection, and the use-case is a developer utility where user-controlled inputs are expected.
Audit Metadata