desktop-ipc-electron
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill documents security-first patterns for Electron IPC, emphasizing the use of
contextBridgeto prevent exposing sensitive APIs to the renderer process. - [SAFE]: Code examples include robust input validation using Zod and explicit checks against path traversal attacks in the main process.
- [SAFE]: The skill advocates for the principle of least privilege by recommending restricted channel allowlists and sanitizing all data received from the untrusted renderer.
- [SAFE]: All suggested external dependencies are well-known and reputable libraries in the Electron and TypeScript ecosystems.
Audit Metadata