Individual skill

electron

Use when building, hardening, or shipping a cross-platform Electron desktop app — main/renderer/preload process model, typed contextBridge IPC, locking down nodeIntegration/contextIsolation/sandbox/CSP, or packaging with signing and auto-update. NOT a Rust-backed shell on the native webview (that is tauri), nor the web UI inside it (that is react).

skills/electron/SKILL.md

Read pinned source

Source commit d9d6bb338f66cc1e23998585e580a0ea45bbcb82

What was checked

Matches the observed repository HEAD: Yes
Scanner rules are current: No
Repository scan complete: No
Skill scan complete: No
Observed behavior: Not checked yet
Last checked: Nov 6, 2026

These are observations at the recorded commit, not a guarantee of safety. Review the source before running it.

Install this skill

Choose an agent in your Stack or copy a command below. Commands fetch the pinned commit and copy only this skill directory. Existing destinations are refused. Copying a command does not install anything.

An install command is unavailable: current rules, complete repository and skill scans, an eligible behavior level and a permitted license are required.

Repository context

Repository stars (not skill ratings): 570
Repository last updated: Nov 4, 2026
License: MIT

Observed agent integration: No specific integration evidence. Standard SKILL.md installation does not imply verified compatibility.

agent-skills Repository topic
agentic-ai Repository topic
ai-agents Repository topic
ai-coding Repository topic
claude-code Repository topic
cli Repository topic
cline Repository topic
codex Repository topic
coding-assistant Repository topic
cursor Repository topic
electron Declared skill tag
desktop Declared skill tag
ipc Declared skill tag
security Declared skill tag
packaging Declared skill tag
auto-update Declared skill tag
code-signing Declared skill tag
security Derived category
design Derived category
operations Derived category
engineering Derived category
design-interface Derived category
engineering-web Derived category

Files and excerpt

File metadata and permitted, redacted excerpts come from the recorded scan. Source links are pinned to that commit.

Browse files

SKILL.mdcore · 11,720 bytes
SKILL.mdcore · 11,720 bytes
SKILL.mdcore · 11,720 bytes
evals/README.mddoc · 1,009 bytes
evals/cases.yamlasset · 2,115 bytes
references/packaging-and-updates.mddoc · 4,442 bytes
references/security-and-ipc.mddoc · 5,921 bytes
scripts/verify.shruns · 5,923 bytes

Read excerpt


# Electron — desktop shell, typed IPC, hardening, signing

This skill owns the **desktop shell**: process model, IPC, security, packaging, signing,
auto-update. It does **not** own the web UI inside the window (`../react/SKILL.md`), the
Node backend logic, or the CI runner matrix.

## The mental model — three processes, one rule

An Electron app is three kinds of process. Code lives in exactly one; putting it in the
wrong one is the root cause of most security holes.

| Process  | Runtime              | Trust         | One per | Does                                              |
|----------|----------------------|---------------|---------|---------------------------------------------------|
| main     | Node.js, full OS API | trusted       | app     | windows, menus, tray, dialogs, fs, child procs    |