desktop-framework-electron

Pass

Audited by Gen Agent Trust Hub on Sep 20, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides robust security guidance for Electron development, specifically mandating the use of contextIsolation, sandbox, and contextBridge to maintain secure boundaries between processes.
  • [SAFE]: IPC communication patterns include explicit input validation and sanitization examples, such as verifying file paths against allowed directories and allow-listing URL protocols for external opening.
  • [SAFE]: The packaging and distribution examples utilize standard industry tools (Electron Forge, Electron Builder) and include necessary security steps like code signing and notarization.
  • [SAFE]: The skill correctly identifies and warns against common Electron security pitfalls, such as disabling node integration and the risks of using shell.openExternal with unvalidated input.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 20, 2026, 03:56 PM
Security Audit — agent-trust-hub — desktop-framework-electron