baoyu-electron-extract

Pass

Audited by Gen Agent Trust Hub on Jun 17, 2026

Risk Level: SAFE
Full Analysis
  • [EXTERNAL_DOWNLOADS]: The skill uses npx to dynamically download and execute well-known tools @electron/asar and prettier from the official NPM registry. It also provides instructions to use npx to fetch the bun runtime if not already installed.
  • [COMMAND_EXECUTION]: The skill executes system commands via child_process.spawn to perform application discovery on macOS and Windows, extract .asar archives, and run code formatting. These actions are performed within the scope of installed applications and the user-defined output directory.
  • [SAFE]: No signs of obfuscation, data exfiltration, or malicious intent were found. The skill includes safety checks to prevent overwriting critical system directories or the user's home directory.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 17, 2026, 02:18 AM
Security Audit — agent-trust-hub — baoyu-electron-extract