desktop-updates-electron-updater
Pass
Audited by Gen Agent Trust Hub on Nov 4, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill serves as educational documentation for developers, providing code samples for legitimate auto-update functionality using the well-established electron-updater and electron-log packages.\n- [SAFE]: The skill explicitly includes security warnings and best practices, such as the requirement for code signing on macOS and the importance of using HTTPS for update servers.\n- [SAFE]: External references, such as the schema URL in the metadata.yaml file, point to the official repository of the skill author (agents-inc), representing legitimate vendor resources.\n- [SAFE]: Instructions for handling sensitive credentials (e.g., GH_TOKEN) follow standard security protocols by recommending the use of environment variables rather than hardcoding secrets.
Audit Metadata