electron-development
Pass
Audited by Gen Agent Trust Hub on Sep 6, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill enforces and provides code examples for secure Electron defaults, including
contextIsolation: true,nodeIntegration: false, andsandbox: true, which are critical for preventing renderer-to-main process exploitation. - [SAFE]: Instructions for IPC (Inter-Process Communication) implement a strict whitelist pattern using
contextBridge, ensuring that the renderer process only has access to explicitly allowed methods and channels. - [SAFE]: The skill includes a robust 'Production Security Checklist' that covers navigation hijacking prevention, Content Security Policy (CSP) enforcement, and secure protocol handling.
- [SAFE]: Dependencies recommended (such as electron-builder, vitest, and playwright) are standard, well-known tools within the Node.js and Electron ecosystems for building and testing applications.
- [SAFE]: No obfuscation, data exfiltration patterns, or unauthorized privilege escalation attempts were found in the instructions or code snippets.
Audit Metadata