electron-ipc-security-audit
Analyze Electron IPC implementations for security vulnerabilities including contextIsolation, nodeIntegration, preload scripts, and channel validation
npx skills add a5c-ai/babysitter --skill electron-ipc-security-audit --agent claude-code
Same command for any agent — swap --agent for codex, cursor, copilot.
Weekly change comes from our own snapshots, not the repository page — it measures attention, not adoption.
# electron-ipc-security-audit Analyze Electron IPC implementations for security vulnerabilities. This skill performs comprehensive security audits of inter-process communication patterns, checking for contextIsolation issues, nodeIntegration risks, preload script security, and IPC channel validation. ## Capabilities - Audit IPC channel implementations for security vulnerabilities - Check contextIsolation and nodeIntegration configuration - Analyze preload scripts for unsafe patterns - Validate IPC message handling and sanitization - Detect prototype pollution risks - Check for remote code execution vulnerabilities - Review Content Security Policy headers - Identify exposed APIs through contextBridge ## Input Schema ```json { "type": "object", "properties": { "projectPath": { "type": "string", "description": "Path to the Electron project root" }, "auditScope": { "type": "array", "items": { "enum": ["ipc-channels", "preload-scripts", "main-process", "renderer-security", "csp", "all"] }, "default": ["all"] }, "severity": { "enum": ["all", "critical", "high", "medium"], "default": "all", "description": "Minimum severity level to report" }, "includeRecommendations": { "type": "boolean",
- Capabilities
- Input Schema
- Output Schema
- Security Checks
- Critical Checks
- High Severity Checks
- Medium Severity Checks
- Usage Instructions
- Vulnerability Patterns
- Critical: Direct ipcRenderer Exposure
- Critical: Missing Context Isolation
- High: Unrestricted IPC Handler
- Best Practices
- Related Skills
What does the electron-ipc-security-audit skill do?
Analyze Electron IPC implementations for security vulnerabilities including contextIsolation, nodeIntegration, preload scripts, and channel validation
How do I install it?
Run `npx skills add a5c-ai/babysitter --skill electron-ipc-security-audit --agent claude-code` — it drops the skill into your project so the agent can pick it up. Swap the --agent value for codex, cursor or copilot if you use one of those.
Where does this skill come from?
From a5c-ai/babysitter, a repository with 1,642 stars. We read it straight from the repository tree rather than a submitted listing, so what you see here is what is actually published.
Is a popular skill a good skill?
Not necessarily. Stars measure attention, not adoption — a repository can trend for a week and be abandoned. That is why we show the weekly change from our own snapshots next to the total, instead of a single flattering number.