skills/stolinski/s-stack/electron/Gen Agent Trust Hub

electron

Pass

Audited by Gen Agent Trust Hub on Jun 20, 2026

Risk Level: SAFEEXTERNAL_DOWNLOADSPROMPT_INJECTION
Full Analysis
  • [SAFE]: The skill correctly emphasizes secure Electron configuration defaults, such as enabling context isolation and sandboxing while disabling Node.js integration in the renderer process.
  • [PROMPT_INJECTION]: The provided IPC handlers for file:read and file:write in Example 2 demonstrate a pattern where the main process performs filesystem operations based on a path provided by the renderer. Without explicit path validation or sanitization, this pattern creates a surface for arbitrary file access if the renderer process were to be compromised.
  • [EXTERNAL_DOWNLOADS]: The skill references established packages and tools from the Electron ecosystem, such as electron-updater, electron-store, and electron-vite, which are standard for building and maintaining Electron applications.
  • [SAFE]: All external repository links and documentation references point to trusted community resources and the author's own infrastructure.
Audit Metadata
Risk Level
SAFE
Analyzed
Jun 20, 2026, 01:21 PM
Security Audit — agent-trust-hub — electron