Configure Electron apps with secure IPC, contextIsolation, and preload scripts.
npx skills add https://github.com/fearovex/claude-config --skill electron-fearovex
Please help me install this Agent Skill. Skill: electron Source: https://github.com/fearovex/claude-config/tree/main/skills/electron Command: npx skills add https://github.com/fearovex/claude-config --skill electron-fearovex
Electron apps often struggle with secure IPC design, proper sandboxing, and reliable updater integration, leading to security and reliability risks.
Configure your project to enable contextIsolation, disable nodeIntegration, and implement a safe preload-based IPC bridge.
High-intent search queries and answers about installing and using this skill.
Secure IPC requires disabling nodeIntegration and enabling contextIsolation in your BrowserWindow configuration. You then establish a safe bridge by exposing specific APIs through preload scripts, ensuring restricted renderer access while maintaining functional communication channels.
Disabling nodeIntegration and using contextIsolation prevents renderer processes from directly accessing Node.js APIs, mitigating security risks. This enforced separation ensures that malicious content cannot compromise native OS integrations or bypass restricted renderer access controls.
The best way to implement an auto-updater involves integrating secure auto-updater modules with your main process. This ensures consistent updates across platforms while maintaining secure window creation and reliable native menu setup for production-grade desktop apps.
Yes, preload scripts act as a secure bridge to expose native OS integrations. By running before the renderer loads and utilizing contextIsolation, they provide controlled access to main process APIs without compromising the restricted renderer environment.
Common Electron IPC anti-patterns include enabling nodeIntegration, ignoring contextIsolation, and using the remote module. Avoiding these insecure patterns ensures proper sandboxing, safe IPC channels, and reliable updater integration for production-grade desktop applications.
TakazudoImplement Electron apps with tabbed interfaces and dev-server orchestration.
felvieiraPackage web front-ends into native binaries for Android, Windows, macOS, and Linux using Tauri v2.
windyskyDesign and implement secure Electron 33+ desktop apps with IPC and auto-update.
wfvueRun Node.js as a sidecar in Tauri v2 applications.
