electron-release
Pass
Audited by Gen Agent Trust Hub on Oct 18, 2026
Risk Level: SAFECOMMAND_EXECUTIONEXTERNAL_DOWNLOADS
Full Analysis
- [COMMAND_EXECUTION]: The skill provides documentation and code templates that utilize shell commands (e.g.,
gpg,git,xcrun) and Node.jschild_process.execSyncfor automating code signing and notarization tasks. - [EXTERNAL_DOWNLOADS]: The instructions reference well-known services like GitHub and Cloudflare R2 for hosting application updates and distribution artifacts.
- [SAFE]: The skill explicitly instructs users to implement security hardening measures for Electron applications, including enabling sandbox mode, disabling node integration in the renderer, and conducting regular dependency audits using
pnpm audit.
Audit Metadata