electron-best-practices
Pass
Audited by Gen Agent Trust Hub on Sep 11, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is primarily educational and provides architectural guidance on building secure Electron applications. No malicious patterns or behaviors were identified in the instructions or the accompanying scripts.
- [COMMAND_EXECUTION]: The skill includes local maintenance scripts (
analyze-security.ts,scaffold-electron-app.ts,generate-ipc-types.ts) designed to be run by the developer via Deno. These scripts are functional, scoped to local file operations, and do not exhibit malicious behavior or unauthorized network access. - [INDIRECT_PROMPT_INJECTION]: The skill provides templates for handling untrusted data between Electron processes. It correctly identifies this as a potential attack surface and mitigates the risk by mandating the use of Electron's security pillars (contextIsolation, sandbox) and recommending strict input validation and Content Security Policies.
- [EXTERNAL_DOWNLOADS]: The documentation references official and well-known services for application distribution and updates, such as GitHub and Electron's official update service. These references are standard and secure for the intended development workflow.
Audit Metadata