electron-ipc-security-audit

# electron-ipc-security-audit Analyze Electron IPC implementations for security vulnerabilities. This skill performs comprehensive security audits of inter-process communication patterns, checking for contextIsolation issues, nodeIntegration risks, preload script security, and IPC channel validation. ## Capabilities - Audit IPC channel implementations for security vulnerabilities - Check contextIsolation and nodeIntegration configuration - Analyze preload scripts for unsafe patterns - Validate IPC message handling and sanitization - Detect prototype pollution risks - Check for remote code execution vulnerabilities - Review Content Security Policy headers - Identify exposed APIs through contextBridge ## Input Schema ```json { "type": "object", "properties": { "projectPath": { "type": "string", "description": "Path to the Electron project root" }, "auditScope": { "type": "array", "items": { "enum": ["ipc-channels", "preload-scripts", "main-process", "renderer-security", "csp", "all"] }, "default": ["all"] }, "severity": { "enum": ["all", "critical", "high", "medium"], "default": "all", "description": "Minimum severity level to report" }, "includeRecommendations": { "type": "boolean", "default": true } }, "required": ["projectPath"] } ``` ## Output Schema ```json { "type": "object", "properties": { "success": { "type": "boolean" }, "summary": { ...