The Agent Skills Directory

[COMMAND_EXECUTION]: The skill provides patterns for spawning and managing external CLI processes using Node.js child_process. It includes specific security controls such as path quoting (IPC-006) and execution timeouts (IPC-007) to prevent command injection and hanging processes.
[EXTERNAL_DOWNLOADS]: The documentation describes patterns for implementing auto-updates using electron-updater via GitHub releases, which is a standard deployment mechanism for desktop applications.
[INDIRECT_PROMPT_INJECTION]: The skill addresses potential injection surfaces in IPC communication between renderer and main processes. It proactively instructs on mitigating these risks through strict context isolation (SEC-001), input validation for exposed APIs (SEC-004), and DOM sanitization using textContent instead of innerHTML (SEC-005).

electron-skills