electron-best-practices SKILL.md skillA
electron-best-practices from ninjasln-labs/agent-skills is an agent skill: a SKILL.md folder an AI agent loads when a task calls for it.
mdr add ninjasln-labs/agent-skills/electron-best-practices@v1.2.0Pins v1.2.0 in mdr.lock. Pin the fingerprint instead.
- Audit grade
- A, 17 of 17 checks passed
- Kind
- SKILL.md skill
- Repository
- ninjasln-labs/agent-skills
- Path
electron-best-practices/SKILL.md- Versions recorded
- 5
- Latest version
- v1.2.0, committed Oct 2, 2026
- First version recorded
- Aug 3, 2026
- Size
- 18,604 bytes
- Repository stars
- 3
- License
- none declared
Guide AI agents through Electron app development with React including security patterns, type-safe IPC, React integration, packaging with code signing, and testing. Keywords: electron, electron-vite, electron-forge, contextBridge, IPC, security, react, packaging, code signing, notarization, playwright, desktop app. Use when building secure Electron apps with React/TypeScript (IPC, packaging, testing).
Collected from public GitHub. Every version is saved exactly as it was and never changes. Install it at an exact version with the mdr tool, and every file is checked before it reaches your agent. The main file is checked against the SHA-256 fingerprint recorded here, and the others against the fingerprints GitHub keeps for its source commit. The automatic checks below grade the latest version, and the same checks always give the same file the same grade.
What the file says
# Electron + React Best Practices ## 中文速览（Quick Guide） - **做什么**：给出用 React 开发 Electron 应用的安全、类型安全 IPC、进程集成、打包签名公证与测试模式，并提供分析、生成脚手架与类型的参考件。 - **何时用**：写主／preload／渲染进程代码、配置 electron-vite 或 Forge、搭 IPC、做 contextBridge／sandbox／CSP 安全、签名公证、或用 Playwright 测 Electron 应用时；不用于 Tauri、纯 Web 应用、Electron 20 以下版本或非 React 渲染框架。 - **核心步骤**：①先套安全默认（contextIsolation、sandbox、关闭 nodeIntegration，主渲染通信全走 contextBridge）②按 `references/` 取模式：类型化 IPC、进程分离、React 集成 ③用 `electron-vite` 或 Forge 打包并做代码签名／公证 ④用 Playwright 端到端与 Jest／Vitest 单测验证。 - **国内可达性**：模式、参考文档与模板都在本包内（`references/`、`assets/templates/`），无需联网即可套用；正文里的可选动作需外部环境——GitHub Actions 矩阵构建、以及 `deno run` 跑 `scripts/` 下的便捷脚本，缺失时直接按正文的可观察出口处理并说明哪一步未跑。 Guide AI agents in building secure, production-ready Electron applications with React. This skill provides security patterns, type-safe IPC communication, project setup guidance, packaging and code signing workflows, and tools for analysis, scaffolding, and type generation. ## When to Use This Skill Use this skill when: - Generating Electron main, preload, or renderer process code - Configuring electron-vite or Electron Forge - Setting up IPC communication between processes …
Read the whole file at its exact version.
How to install
mdr add ninjasln-labs/agent-skills/electron-best-practices@sha256:8607249e8a3bdca5The line at the top of this page pins the label v1.2.0, which is what most people want. This one pins the sha256 fingerprint of the contents instead, so it survives a label being moved. Either way the exact version is written to mdr.lock, and mdr install downloads and checks those contents again, so it installs them exactly or stops with an error.
[](https://markdownregistry.com/a/art_ilpe3m2w6qtqwmff)
2 badge image fetches in 30 days. What the badge shows.
Versions
The registry has recorded 5 versions of this file, between Aug 3, 2026 and Oct 2, 2026, about one every 15 days.
| version | committed | commit | size | audit | |
|---|---|---|---|---|---|
| v1.2.0 latest | 2026-10-02 | 6a4995b | 18,604 B | A | view · diff |
| v1.1.1 | 2026-09-29 | 0febb7a | 17,396 B | A | view · diff |
| v1.0.0 | 2026-09-07 | 571fb57 | 12,316 B | A | view · diff |
| git:20260803.88cd167 | 2026-08-03 | 88cd167 | 12,234 B | A | view · diff |
| git:20260803.db14631 | 2026-08-03 | db14631 | 458 B | A | view |
Audit of the latest version
- pass: Frontmatter block present
- pass: Frontmatter declares a name
- pass: Frontmatter declares a description
- pass: Size between 200 bytes and 200 KB (18604 bytes)
- pass: No zero-width or bidi control characters
- pass: No instruction hidden inside an HTML comment
- pass: No link to an exfiltration or paste host
- pass: No credential-shaped string
- pass: No instruction to send local credentials anywhere
- pass: No text hidden with inline styles
- pass: No prompt-injection phrasing
- pass: No curl or wget piped into a shell
- pass: No recursive delete of root, home or parent
- pass: No instruction to read or print local credentials
- pass: No base64 blob over 200 characters
- pass: No link to a raw IP address
- pass: No script tag
Source
ninjasln-labs/agent-skills · 3 stars · license none declared · pushed 2026-10-05 · branch main
API
GET https://markdownregistry.com/api/v1/artifacts/art_ilpe3m2w6qtqwmff GET https://markdownregistry.com/api/v1/resolve?ref=ninjasln-labs/agent-skills/electron-best-practices GET https://markdownregistry.com/api/v1/blob/8607249e8a3bdca578c5156eca6c810665f7e452062b7aeaf1e609c579b31335
Your AI assistant does the legwork. You hear about the deals worth your word. Hand yours the standing instructions at modelranch.com and it joins the network that reads files like this one.
Guides: the SKILL.md format and its required fields · what to check before you install a skill · how to pin a skill to an exact version · where to find agent skills · keeping a team on the same skills · which agent file does what.