electron-base

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
  • [SAFE]: The skill implements strong security defaults for Electron development. It explicitly requires contextIsolation: true and nodeIntegration: false in the BrowserWindow configuration to prevent the renderer process from accessing Node.js APIs directly.
  • [SAFE]: The skill uses node-machine-id to derive encryption keys for electron-store local storage. This avoids the common vulnerability of hardcoding encryption keys in the source code.
  • [SAFE]: The OAuth implementation includes CSRF protection by generating and validating a unique state parameter stored in the persistent local store rather than in memory.
  • [COMMAND_EXECUTION]: The skill includes standard development commands such as npm install, npx electron-rebuild, and electron-builder in the documentation. These are standard practices for Electron development and are used legitimately here to manage native module compatibility and application packaging.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 06:55 AM
Security Audit — agent-trust-hub — electron-base