Secure Electron IPC boundaries with context isolation and payload validation.
npx skills add https://github.com/euroconic/noter --skill electron-ipc-bridge
Please help me install this Agent Skill. Skill: electron-ipc-bridge Source: https://github.com/euroconic/noter/tree/main/skills/electron-ipc-bridge Command: npx skills add https://github.com/euroconic/noter --skill electron-ipc-bridge
The Electron IPC boundary is a critical security frontier; this Skill codifies the standards required to keep the main process safe from renderer-originated compromises and untrusted data flowing across processes.
Configure the Electron preload to securely expose IPC APIs and validate all renderer inputs.
High-intent search queries and answers about installing and using this skill.
Secure Electron IPC boundaries by enforcing context isolation, applying strict preload contracts, and validating cross-process payloads to prevent renderer compromises from affecting the main process.
Context isolation in Electron separates untrusted renderer code from Node.js APIs in the main process, and you need it whenever configuring cross-process data flows to ensure safe IPC channel design.
Expose IPC APIs safely by using a strict preload-contract pattern where contextBridge.exposeInMainWorld only whitelists specific APIs, ensuring the renderer cannot access unrestricted Node.js methods.
Yes, this approach prevents path traversal by guiding safe IPC channel design and enforcing payload validation alongside path-safety checks for all cross-process data flows in production Electron apps.
The best way to validate renderer payloads is applying strict preload contracts and path-safety checks during channel creation, ensuring untrusted data flows are sanitized before reaching the main process.
Disabling context isolation compromises the main process by allowing untrusted renderer code to directly access Node.js APIs, bypassing the secure IPC boundaries required to prevent cross-process attacks.
gouravsingh311Orchestrate Electron IPC communication between main and renderer processes.
claudcherejiAutomate compliance validation and evidence collection for GDPR, HIPAA, PCI DSS, SOC 2, and ISO.
Gentleman-ProgrammingCreates secure, typed IPC layers for Electron apps with contextBridge.
storyblokWrite focused Vitest unit tests for JavaScript/TypeScript logic.
