baoyu-electron-extract
Pass
Audited by Gen Agent Trust Hub on Jun 17, 2026
Risk Level: SAFE
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill uses
npxto dynamically download and execute well-known tools@electron/asarandprettierfrom the official NPM registry. It also provides instructions to usenpxto fetch thebunruntime if not already installed. - [COMMAND_EXECUTION]: The skill executes system commands via
child_process.spawnto perform application discovery on macOS and Windows, extract.asararchives, and run code formatting. These actions are performed within the scope of installed applications and the user-defined output directory. - [SAFE]: No signs of obfuscation, data exfiltration, or malicious intent were found. The skill includes safety checks to prevent overwriting critical system directories or the user's home directory.
Audit Metadata