skills.rest
AI-Safeter
AI-SafeterCOMMUNITY
Explore all skills by this author →
GitHub

electron-development

Set up secure Electron app architecture with preload-mediated IPC.

10|Updated May 20, 2026
Search Tags:#security#packaging#electron#auto-update#desktop#preload#ipc
One-click install
npx skills add https://github.com/AI-Safeter/antigravity-cli-plugin --skill electron-development-ai-safeter
Or copy as Structured Prompt for Agent▼
Please help me install this Agent Skill.
Skill: electron-development
Source: https://github.com/AI-Safeter/antigravity-cli-plugin/tree/main/plugins/electron-development
Command: npx skills add https://github.com/AI-Safeter/antigravity-cli-plugin --skill electron-development-ai-safeter

SYSTEM DOCUMENTATION & REQUIREMENTS

What problem does it solve?

This skill guides engineers to implement production-grade Electron desktop applications with strong security defaults, a robust multi-process architecture, and a scalable packaging and update workflow.

Core Features & Use Cases

  • Enforce security defaults: contextIsolation, nodeIntegration: false, sandbox, and a CSP-friendly setup.
  • Implement secure IPC: preload with contextBridge, whitelisted channels, and safe request/response patterns using ipcMain.handle and ipcRenderer.invoke.
  • Provide project structure guidance: organization of main, preload, and renderer code, plus packaging and signing practices with electron-builder and code signing.
  • Enable end-to-end development and distribution: debugging workflows, auto-update integration, and cross-platform build strategies.

Quick Start

Initialize a secure Electron project scaffold and run the development workflow with a preload-based IPC bridge and production build pipeline.

Frequently Asked Questions about electron-development

High-intent search queries and answers about installing and using this skill.

FAQPage Schema
How do I set up a secure Electron app architecture with contextIsolation and sandbox?▼

To set up a secure Electron app, enforce contextIsolation, disable nodeIntegration, enable sandbox, and configure CSP headers. This ensures strict isolation between your renderer process and Node.js APIs, preventing malicious code execution.

What's the best way to configure IPC in Electron for safe renderer to main communication?▼

Secure Electron apps use a preload script with contextBridge to expose a whitelisted IPC bridge. This mediates communication between the sandboxed renderer and main process using safe ipcMain.handle and ipcRenderer.invoke request-response patterns.

How do I automate packaging and auto-update workflows for cross-platform desktop apps?▼

Automate cross-platform desktop app packaging and auto-updates by integrating electron-builder with code signing and automated update pipelines. This supports building, signing, and distributing production-grade applications across macOS, Windows, and Linux.

Does this Electron development workflow support macOS, Windows, and Linux builds?▼

Yes, this Electron development workflow supports cross-platform builds across macOS, Windows, and Linux. It provides tooling for building, signing, and updating production-grade desktop applications with strict security defaults for each operating system.

Why should I disable nodeIntegration in my Electron renderer process?▼

Disabling nodeIntegration in your Electron renderer process prevents direct access to Node.js APIs from the web view. Combined with contextIsolation and a preload bridge, it mitigates security risks by ensuring the renderer operates in a strict sandbox.

Related Skills

Explore More Software Engineering Skills→
RepairYourTechRepairYourTech
6

electron

Create desktop apps with batteries-included WebView-less architecture using HTML, CSS and JavaScript.

Community
Advanced
pedronauckpedronauck
567

electron-builder

Automate packaging, code signing, notarization, and distribution of Electron apps.

Community
Advanced
phrazzldphrazzld
13

electron

Standardize Electron IPC contracts and BrowserWindow lifecycle across main, preload, and renderer processes.

Community
Advanced
rdjakovicrdjakovic

understanding-tauri-architecture

Explain Tauri architecture, including Rust backend, webview integration, and IPC mechanisms.

Community
Intermediate