electron-dev
Pass
Audited by Gen Agent Trust Hub on Mar 3, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documentation establishes high-security standards for Electron development, specifically mandating settings like contextIsolation and sandbox mode to protect the application environment.- [COMMAND_EXECUTION]: Native service integrations for tools such as FFmpeg and Whisper are implemented using child_process.spawn with argument arrays, which is the recommended secure approach to avoid shell command injection vulnerabilities.- [DATA_EXFILTRATION]: The provided code for file system operations includes explicit logic to resolve paths safely and prevent path traversal attacks by validating that operations occur within the allowed application data directory.
Audit Metadata