desktop-updates-electron-updater
Pass
Audited by Gen Agent Trust Hub on Jul 25, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive guidance on implementing auto-updates using the standard electron-updater library, following industry best practices for Electron development.
- [SAFE]: Security warnings are prominently featured, requiring developers to use code signing and HTTPS, and to maintain signature verification in production environments.
- [SAFE]: External references to GitHub and S3 providers are documented neutrally as configuration options for hosting legitimate application updates.
- [SAFE]: Sensitive credential handling is demonstrated using environment variables (e.g., GH_TOKEN, DO_KEY_ID), which is the recommended method for preventing hardcoded secrets.
Audit Metadata