electron-development

Pass

Audited by Gen Agent Trust Hub on Sep 6, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill enforces and provides code examples for secure Electron defaults, including contextIsolation: true, nodeIntegration: false, and sandbox: true, which are critical for preventing renderer-to-main process exploitation.
  • [SAFE]: Instructions for IPC (Inter-Process Communication) implement a strict whitelist pattern using contextBridge, ensuring that the renderer process only has access to explicitly allowed methods and channels.
  • [SAFE]: The skill includes a robust 'Production Security Checklist' that covers navigation hijacking prevention, Content Security Policy (CSP) enforcement, and secure protocol handling.
  • [SAFE]: Dependencies recommended (such as electron-builder, vitest, and playwright) are standard, well-known tools within the Node.js and Electron ecosystems for building and testing applications.
  • [SAFE]: No obfuscation, data exfiltration patterns, or unauthorized privilege escalation attempts were found in the instructions or code snippets.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 6, 2026, 02:15 PM
Security Audit — agent-trust-hub — electron-development