agent-desktop-ffi
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- Sensitive Data Handling: The
ad_snapshotandad_last_error_detailsfunctions return information about the user's screen, including window titles and element values. The documentation correctly identifies this as sensitive and advises against logging this data to shared surfaces. - Platform Permissions: The skill relies on Accessibility and input permissions (e.g.,
AXIsProcessTrustedon macOS) to interact with the desktop. This is a standard requirement for automation tools. - Supply Chain Security: The library supports verification of prebuilt binaries using Sigstore attestations, which is a recommended practice for verifying the integrity of external components.
- FFI Boundary Safety: The use of
catch_unwindat the FFI boundary prevents Rust panics from crashing the host process, contributing to the stability of the integration.
Audit Metadata