electron-development
Pass
Audited by Gen Agent Trust Hub on Jul 14, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill provides comprehensive security guidance for Electron development, explicitly mandating configurations like
contextIsolation: true,nodeIntegration: false, andsandbox: trueto prevent potential remote code execution (RCE) via XSS. - [SAFE]: It promotes secure Inter-Process Communication (IPC) by demonstrating the use of
contextBridgewith explicit channel whitelisting and mandatory input validation in the main process. - [SAFE]: All referenced tools and dependencies, such as
electron-builder,electron-updater,playwright, andvitest, are industry-standard, well-known packages in the Electron ecosystem. - [SAFE]: The skill includes instructions for implementing Content Security Policy (CSP) and secure navigation handling, further hardening the application against common web-based attacks.
Audit Metadata