electron
Pass
Audited by Gen Agent Trust Hub on Oct 31, 2026
Risk Level: SAFE
Full Analysis
- [SAFE]: The skill implements security best practices for Electron applications, specifically using
contextBridge.exposeInMainWorldto isolate the renderer process from privileged Node.js APIs. - [SAFE]: The provided code skeleton includes origin validation (
event.senderFrame.origin) within IPC handlers, preventing unauthorized local or remote content from triggering sensitive main-process actions. - [SAFE]: Recommends hardening measures including strict Content Security Policy (CSP) headers and the use of
@electron/fusesto disable unused high-risk features likerunAsNode. - [SAFE]: References standard, well-known infrastructure for updates, including GitHub Releases and official Electron update services (
update.electronjs.org).
Audit Metadata