electron-desktop

Pass

Audited by Gen Agent Trust Hub on Sep 17, 2026

Risk Level: SAFE
Full Analysis
  • [SAFE]: The skill provides standard documentation and code snippets for building Electron applications without any malicious patterns.
  • [SAFE]: Follows Electron security best practices by explicitly setting contextIsolation: true, nodeIntegration: false, and sandbox: true in the window preferences within src/main/main.ts.
  • [SAFE]: Implements Inter-Process Communication (IPC) using contextBridge and ipcRenderer in src/main/preload.ts, which is the recommended secure method for exposing native functionality to the renderer process.
  • [SAFE]: File system operations in src/main/ipc.ts are gated behind user-initiated native dialogs (showOpenDialog, showSaveDialog), preventing unauthorized or arbitrary file access by the application.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 17, 2026, 08:35 PM