The Agent Skills Directory

[SAFE]: The skill provides documentation and code templates that follow the official Electron security guidelines. It explicitly instructs users to use contextIsolation: true and nodeIntegration: false in the webPreferences of BrowserWindow instances.
[REMOTE_CODE_EXECUTION]: No instances of arbitrary command execution or piping remote scripts to a shell (e.g., curl | bash) were found. The mentioned installation commands for Electron and its tooling are standard development practices.
[DATA_EXFILTRATION]: No sensitive file access or network exfiltration patterns were detected. The skill uses standard Electron APIs for local file loading and IPC communication.
[OBFUSCATION]: The content is clear and readable. No hidden characters, encoded payloads, or homoglyph attacks were identified.
[INDIRECT_PROMPT_INJECTION]: The skill provides templates for building applications but does not ingest untrusted data in a way that would compromise the agent itself. It includes proper guidance on creating secure IPC bridges using contextBridge to prevent renderer-side attacks.

electron