The Agent Skills Directory

[SAFE]: The skill serves as a high-quality development guide for building desktop applications with Electron. It explicitly mandates the use of security-critical settings including contextIsolation: true, nodeIntegration: false, and sandbox: true to mitigate risks of remote code execution.
[SAFE]: IPC communication patterns follow industry best practices by using a preload script with contextBridge and explicit channel whitelisting, which prevents the renderer process from accessing dangerous Node.js or Electron APIs directly.
[SAFE]: The skill includes code snippets for implementing Content Security Policy (CSP) headers and preventing navigation hijacking or unauthorized window opening.
[SAFE]: Input validation is recommended for all IPC handlers in the main process, ensuring that data received from the untrusted renderer process is properly sanitized before use.
[SAFE]: Guidance on packaging and distribution includes security measures like ASAR archiving, code signing, and secure auto-update mechanisms using verified signatures over HTTPS.

electron-development