electron-app-dev
Expert in developing cross-platform desktop applications using Electron, TypeScript, and React, ensuring security and performance.
Install this skill
Security score
The electron-app-dev skill was audited on Feb 9, 2026 and we found 13 security issues across 3 threat categories. Review the findings below before installing.
Categories Tested
Security Issues
Template literal with variable interpolation in command context
| 79 | return Promise.reject(new Error(`Invalid channel: ${channel}`)) |
Template literal with variable interpolation in command context
| 288 | ```json |
Template literal with variable interpolation in command context
| 350 | heapUsed: `${Math.round(memory.heapUsed / 1024 / 1024)}MB`, |
Template literal with variable interpolation in command context
| 351 | heapTotal: `${Math.round(memory.heapTotal / 1024 / 1024)}MB`, |
Access to hidden dotfiles in home directory
| 404 | // Linux: ~/.config/YourApp |
Access to .env file
| 184 | if (process.env.NODE_ENV === 'development') { |
Access to .env file
| 471 | if (process.env.NODE_ENV === 'development') { |
External URL reference
| 111 | win.loadURL('http://localhost:5173') |
External URL reference
| 117 | win.loadURL('http://localhost:5173') |
External URL reference
| 236 | view1.webContents.loadURL('https://example.com') |
External URL reference
| 240 | view2.webContents.loadURL('https://another.com') |
External URL reference
| 309 | "url": "http://localhost:5173", |
External URL reference
| 472 | win.loadURL('http://localhost:5173') |