windows-desktop-e2e
Pass
Audited by Gen Agent Trust Hub on Jun 23, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [SAFE]: No malicious patterns, obfuscation, or unauthorized data exfiltration attempts were found. The skill includes appropriate security controls, such as default redaction of typed text in trace logs and isolation strategies for test processes.
- [COMMAND_EXECUTION]: The skill uses
subprocess.Popento launch the application target andffmpegfor screen recording. These operations are essential for the skill's primary purpose of E2E testing and are triggered by developer-defined paths. - [EXTERNAL_DOWNLOADS]: Recommends installing standard, well-known Python packages from public registries and official tools from trusted sources like Microsoft (Accessibility Insights) and FFmpeg. These references are documented neutrally and serve legitimate development purposes.
- [DATA_EXFILTRATION]: Provides functionality to capture screenshots and logs of UI interactions for test debugging. The documentation explicitly warns against logging sensitive information (PII/credentials) when trace logging is enabled, and the code includes redaction logic by default.
Audit Metadata