Electron App Builder

Electron App Builder generates secure Electron applications following the modern security model with contextIsolation enabled and nodeIntegration disabled.

Security Architecture

The skill enforces Electron's recommended security practices: Main process handles all privileged operations (filesystem, native APIs, network), Preload scripts expose a minimal, typed API via `contextBridge.exposeInMainWorld`, and Renderer accesses only the exposed API, never Node.js directly.

IPC Communication

Generated IPC handlers use `ipcMain.handle()` (async request/response) and `ipcMain.on()` (fire-and-forget). Each handler validates input types before processing. The preload bridge provides typed wrappers that TypeScript can check end-to-end.

Native Integrations

Built-in helpers for: system tray icons with context menus, native file dialogs, OS notification sending, protocol handler registration, and clipboard access — all properly gated behind IPC.

Build & Distribution

Configures electron-builder with code signing for macOS (Developer ID), Windows (EV certificate), and Linux (AppImage/deb/rpm). GitHub Actions workflow for CI/CD builds and S3-based auto-update server.

Auto-Update

electron-updater integration with differential updates, staged rollout percentages, and update notification UI in the renderer.