electron-base
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTION
Full Analysis
- [SAFE]: The skill implements strong security defaults for Electron development. It explicitly requires
contextIsolation: trueandnodeIntegration: falsein the BrowserWindow configuration to prevent the renderer process from accessing Node.js APIs directly. - [SAFE]: The skill uses
node-machine-idto derive encryption keys forelectron-storelocal storage. This avoids the common vulnerability of hardcoding encryption keys in the source code. - [SAFE]: The OAuth implementation includes CSRF protection by generating and validating a unique
stateparameter stored in the persistent local store rather than in memory. - [COMMAND_EXECUTION]: The skill includes standard development commands such as
npm install,npx electron-rebuild, andelectron-builderin the documentation. These are standard practices for Electron development and are used legitimately here to manage native module compatibility and application packaging.
Audit Metadata