desktop-packaging-electron-forge
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTION
Full Analysis
- [INDIRECT_PROMPT_INJECTION]: The skill instructs the agent to interact with untrusted project data (e.g.,
package.json,forge.config.ts) and execute build commands based on that data, creating an injection surface. - Ingestion points: The agent reads project configuration files such as
package.jsonandforge.config.tsto provide assistance (documented in SKILL.md and examples/core.md). - Boundary markers: None explicitly provided in the instructions to separate untrusted file content from instructions.
- Capability inventory: The skill utilizes capabilities to execute
electron-forgeCLI commands and perform file system operations through build hooks (documented in reference.md and examples/hooks.md). - Sanitization: Not applicable; however, the skill strongly advocates for technical security controls like Electron Fuses and ASAR integrity validation to protect the resulting application.
- [SAFE]: The skill documents interactions with established services and official toolchains in a secure manner.
- References to GitHub, Amazon S3, Snapcraft, and Apple developer tools utilize standard official integration patterns (examples/publishers.md, examples/signing.md).
- The skill provides clear guidance on avoiding hardcoded credentials, recommending the use of environment variables and CI/CD secret management.
Audit Metadata