electron
Pass
Audited by Gen Agent Trust Hub on Jun 20, 2026
Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
- [SAFE]: The skill correctly emphasizes secure Electron configuration defaults, such as enabling context isolation and sandboxing while disabling Node.js integration in the renderer process.
- [PROMPT_INJECTION]: The provided IPC handlers for
file:readandfile:writein Example 2 demonstrate a pattern where the main process performs filesystem operations based on a path provided by the renderer. Without explicit path validation or sanitization, this pattern creates a surface for arbitrary file access if the renderer process were to be compromised. - [EXTERNAL_DOWNLOADS]: The skill references established packages and tools from the Electron ecosystem, such as
electron-updater,electron-store, andelectron-vite, which are standard for building and maintaining Electron applications. - [SAFE]: All external repository links and documentation references point to trusted community resources and the author's own infrastructure.
Audit Metadata