desktop-framework-electron
Pass
Audited by Gen Agent Trust Hub on Sep 20, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides robust security guidance for Electron development, specifically mandating the use of
contextIsolation,sandbox, andcontextBridgeto maintain secure boundaries between processes. - [SAFE]: IPC communication patterns include explicit input validation and sanitization examples, such as verifying file paths against allowed directories and allow-listing URL protocols for external opening.
- [SAFE]: The packaging and distribution examples utilize standard industry tools (Electron Forge, Electron Builder) and include necessary security steps like code signing and notarization.
- [SAFE]: The skill correctly identifies and warns against common Electron security pitfalls, such as disabling node integration and the risks of using
shell.openExternalwith unvalidated input.
Audit Metadata