agent-desktop-ffi

Pass

Audited by Gen Agent Trust Hub on Oct 31, 2026

Risk Level: SAFE
Full Analysis
  • Sensitive Data Handling: The ad_snapshot and ad_last_error_details functions return information about the user's screen, including window titles and element values. The documentation correctly identifies this as sensitive and advises against logging this data to shared surfaces.
  • Platform Permissions: The skill relies on Accessibility and input permissions (e.g., AXIsProcessTrusted on macOS) to interact with the desktop. This is a standard requirement for automation tools.
  • Supply Chain Security: The library supports verification of prebuilt binaries using Sigstore attestations, which is a recommended practice for verifying the integrity of external components.
  • FFI Boundary Safety: The use of catch_unwind at the FFI boundary prevents Rust panics from crashing the host process, contributing to the stability of the integration.
Audit Metadata
Risk Level
SAFE
Analyzed
Oct 31, 2026, 12:05 AM