NYC

electron-skills

Pass

Audited by Gen Agent Trust Hub on Feb 17, 2026

Risk Level: SAFE
Full Analysis
  • Security Best Practices (SAFE): The skill provides patterns that follow Electron security recommendations, specifically enforcing contextIsolation: true and nodeIntegration: false to mitigate common desktop application vulnerabilities.
  • Command Execution (LOW): The skill includes patterns for managing local backend services using child_process.exec. While shell execution carries inherent risks, the skill explicitly provides a security checklist (item IPC-006) requiring developers to quote executable paths to prevent space-injection attacks.
  • Network Operations (SAFE): Network access is limited to a local health check on 127.0.0.1 and standard application update functionality via the electron-updater library.
Audit Metadata
Risk Level
SAFE
Analyzed
Feb 17, 2026, 05:21 PM