desktop-security-electron
Pass
Audited by Gen Agent Trust Hub on Oct 24, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides legitimate security configuration guidance for Electron applications.
- [COMMAND_EXECUTION]: Code examples demonstrate the use of
@electron/fusesfor binary hardening andshell.openExternalfor URL handling. These are standard Electron APIs used as intended for security purposes. - [EXTERNAL_DOWNLOADS]: Mentions standard, well-known Node.js packages such as
@electron/fuses,@electron-forge/plugin-fuses, and@electron/packager. These are official or industry-standard tools for Electron development. - [INDIRECT_PROMPT_INJECTION]: The skill explicitly addresses risks associated with untrusted data ingestion (e.g., deep links, IPC messages, and external URLs) and provides robust sanitization and validation patterns to mitigate these vulnerabilities.
Audit Metadata