Security audit
Nextjs To Electron
Security checks across malware telemetry and agentic risk
Overview
This is a straightforward instructional skill for wrapping a static Next.js app in Electron, with no hidden execution or unrelated data access found.
Before installing, review the generated Electron and GitHub Actions templates for your own project names, release permissions, checkout branch, and whether contents:write is acceptable for your repository. The local persistence described is limited to app state such as locale and window size.
SkillSpector
By NVIDIA
Vulnerability Patterns
- Prompt InjectionInstruction Override, Hidden Instructions, Exfiltration Commands
- Data ExfiltrationExternal Transmission, Env Variable Harvesting, File System Enumeration
- Privilege EscalationExcessive Permissions, Sudo/Root Execution, Credential Access
- Supply ChainUnpinned Dependencies, External Script Fetching, Obfuscated Code
- Excessive AgencyUnrestricted Tool Access, Autonomous Decision Making, Scope Creep
VirusTotal
62/62 vendors flagged this skill as clean.
Static analysis
No suspicious patterns detected.