desktop-ui-electron
Pass
Audited by Gen Agent Trust Hub on Nov 6, 2026
Risk Level: SAFE
Full Analysis
- [DATA_EXPOSURE_AND_EXFILTRATION]: The skill documents the use of
app.getPath('userData')for storing window state configuration. This is the standard, secure, and cross-platform recommended location for application-specific data. - [REMOTE_CODE_EXECUTION]: No remote code execution patterns were detected. The skill references the widely-used and trusted
electron-window-statepackage for state management. - [INDIRECT_PROMPT_INJECTION]: The implementation of window state restoration includes defensive programming by validating saved coordinates against the
workAreaof available displays, ensuring the UI remains accessible even if the monitor configuration has changed. - [COMMAND_EXECUTION]: Platform-specific UI features like kiosk mode and always-on-top levels are implemented using standard Electron APIs. The documentation correctly warns developers about the security and UX implications of these features, such as the need for in-app exit mechanisms.
- [PERSISTENCE]: The window state persistence mechanism is limited to UI layout data (position, size) and does not attempt to modify system boot sequences, shell profiles, or other persistence vectors commonly used by malware.
Audit Metadata