desktop-packaging-electron-forge
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides detailed technical documentation and examples for the Electron Forge toolchain without introducing malicious patterns.
- [SAFE]: It emphasizes critical security configurations for production apps, specifically mandating the use of ASAR to prevent source code exposure and Fuses to disable arbitrary code execution via node environment variables.
- [SAFE]: All examples for credential management use industry-standard practices, such as environment variables (
process.env) and CI/CD secret management, explicitly warning against hardcoding sensitive keys. - [SAFE]: External dependencies and tools mentioned (such as
@electron-forgepackages andelectron-store) are part of the well-known and trusted Electron ecosystem. - [SAFE]: The CI/CD patterns for macOS and Windows code signing follow standard automation procedures for importing certificates and notarizing binaries.
Audit Metadata