application-react-desktop
Pass
Audited by Gen Agent Trust Hub on Oct 29, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill is entirely instructional and does not contain any executable scripts, command-line operations, or network requests.
- [SAFE]: The instructions explicitly advocate for security best practices in desktop application development, including:
- Enforcing Electron context isolation and disabling Node.js integration in renderers.
- Restricting Tauri commands with capabilities and permissions.
- Treating IPC (Inter-Process Communication) payloads as untrusted input.
- Validating renderer input and using typed bridges as trust boundaries.
- Keeping sensitive data (credentials, tokens) out of logs and client-visible configurations.
Audit Metadata