electron-egg
Pass
Audited by Gen Agent Trust Hub on Oct 4, 2026
Risk Level: SAFEINDIRECT_PROMPT_INJECTIONEXTERNAL_DOWNLOADS
Full Analysis
- [EXTERNAL_DOWNLOADS]: The skill provides instructions to install the
ee-coreframework package via standard package managers (npm, yarn, pnpm) and to clone the official project repository from Gitee (https://gitee.com/dromara/electron-egg.git). These are standard procedures for initializing a project using the Electron EGG framework. - [INDIRECT_PROMPT_INJECTION]: The skill documents and provides templates for Inter-Process Communication (IPC) between the renderer and main processes, which is a common pattern in Electron applications. This architecture presents a potential attack surface if the developed application processes untrusted data.
- Ingestion points: IPC channels defined in
examples/features/ipc-communication.mdwhereipcRenderer.sendtransmits data from the UI to the main process. - Boundary markers: No specific delimiters or "ignore instructions" warnings are included in the basic IPC examples.
- Capability inventory: The main process has access to system-level capabilities including window management (
api/window-api.md) and application lifecycle hooks (api/main-api.md). - Sanitization: The provided examples demonstrate basic data passing but do not include explicit sanitization or validation logic for the messages being exchanged.
Audit Metadata