CtrlK
BlogDocsLog inGet started
Tessl Logo
SkillPublic

electron-development

Master Electron desktop app development with secure IPC, contextIsolation, preload scripts, multi-process architecture, electron-builder packaging, code signing, and auto-update.

Quality

69%

Does it follow best practices?

Run evals on this skill

Adds up to 20 points to the overall score

View guide
SecuritybySnyk

Passed

No findings from the security scan

Fix and improve this skill with Tessl

tessl review fix ./skills/electron-development/SKILL.md
SKILL.md
Quality
Evals
Security

Quality

Content

56%Weight 40%Scale 1-5

Reviews the quality of instructions and guidance provided to agents. Good implementation is clear, handles edge cases, and produces reliable results.

The content delivers genuinely valuable, executable Electron security guidance (IPC whitelisting, hardening checklist, builder/signing configs), but it is a monolithic ~850-line file with no progressive disclosure, and roughly a third of it restates boilerplate Claude already knows. Splitting reference material into separate files and trimming the known-content sections would substantially improve it.

Suggestions

Split reference-type material into one-level-deep files (e.g., references/testing.md, references/electron-builder.md, references/diagnostics.md) and keep SKILL.md as a concise overview with clearly signaled links — the skill currently has no references/ at all and inlines everything.

Cut content Claude already knows: the process-model role table, standard lifecycle boilerplate (activate/window-all-closed), .vscode/launch.json, and package.json dev scripts — keep only the security-relevant deviations from defaults.

Tighten weak code examples: the unit-test stub has an empty it() body, and the window-open handler mixes require('electron') with ES imports — make every snippet copy-paste-ready and stylistically consistent.

DimensionReasoningScore

Conciseness

At ~850 lines, the body inlines substantial content Claude already knows: the multi-process model explanation and role table, standard lifecycle boilerplate (activate/window-all-closed handlers), .vscode/launch.json, package.json dev scripts, and a Playwright config, plus a unit-test example with an empty body. This matches 'noticeably verbose; several unnecessary explanations or padded sections'; it stays above 1 because the security, IPC-whitelisting, and diagnostics sections carry real, non-obvious value.

2 / 5

Actionability

Mostly executable, copy-paste-ready TypeScript/YAML/bash covering the common cases (secure BrowserWindow, preload whitelist, ipcMain handlers, electron-builder.yml, signing env vars, updater, E2E test). Minor gaps keep it below 5: the unit test stub has an empty body, the window-open handler mixes require() with ES imports, and 'createMainWindow' is used in the lifecycle snippet with its CSP wiring defined elsewhere.

4 / 5

Workflow Clarity

The Instructions section gives a clear 5-step sequence with an explicit validation checkpoint ('Validate against the Production Security Checklist before shipping'), and the Common Issue Diagnostics section provides symptom → root cause → fix feedback loops. Not 5 because steps like 'Implement, test, and build with appropriate tooling' are vague, and testing guidance appears far from the workflow steps rather than integrated as checkpoints.

4 / 5

Progressive Disclosure

The body is well-sectioned with clear headers, but it is entirely monolithic — no references/, scripts/, or assets/ files exist, and reference-type content (full testing strategy, complete electron-builder config, debugging setup, diagnostics) that clearly belongs in separate one-level-deep files is inlined in SKILL.md. This matches 'some structure but could be better organized; content that should be separate is inline'; it is above 2 only because section headers make the document navigable.

3 / 5

Total

13

/

20

Passed

Description

70%Weight 40%Scale 1-5

Based on the skill's description, can an agent find and select it at the right time? Clear, specific descriptions lead to better discovery.

A strong, keyword-rich description with a clear 'what', but it omits any explicit 'use when' trigger guidance, which caps completeness and weakens its retrieval behavior. Adding a 'Use when...' clause with concrete trigger phrases (building/packaging/debugging an Electron app) would raise it to top-tier quality.

Suggestions

Append an explicit 'Use when...' clause (e.g., 'Use when building, securing, packaging, or debugging Electron desktop apps') — its absence caps completeness at 3 per the rubric.

Add natural trigger synonyms users actually say (notarize, .exe, DMG, AppImage, 'app won't update', 'white screen') to strengthen trigger-term coverage beyond the current Electron jargon.

Mention the debugging and performance-optimization capabilities the body actually covers so the description's action list is comprehensive rather than partial.

DimensionReasoningScore

Specificity

The description lists seven specific concrete items ('secure IPC, contextIsolation, preload scripts, multi-process architecture, electron-builder packaging, code signing, and auto-update'), matching the 'several specific actions; minor gaps' anchor. It is not 5 because these are technology areas under a single 'Master ... with' verb rather than distinct concrete actions, and capabilities the body claims (debugging, performance optimization) are absent.

4 / 5

Completeness

The 'what' is clear and detailed, but there is no 'Use when...' clause or equivalent explicit trigger guidance ('Master Electron desktop app development with...'). Per the judging guidelines, a missing 'Use when' clause caps completeness at 3; the 'when' is only weakly implied by the domain itself.

3 / 5

Trigger Term Quality

Strong natural keyword coverage ('Electron desktop app', 'IPC', 'preload', 'electron-builder', 'code signing', 'auto-update') that users would plausibly say. Not 5 because common synonyms and variations users actually say (notarize, .exe, DMG, AppImage, 'white screen') are missing.

4 / 5

Distinctiveness Conflict Risk

Clear niche with distinct triggers: Electron-specific terms like 'contextIsolation', 'preload scripts', and 'electron-builder' anchor it firmly against adjacent skills (Tauri, Chrome extensions, React Native) with minimal conflict risk. It is not 4 because the named tooling leaves essentially no ambiguity about which skill should trigger for desktop/Electron requests.

5 / 5

Total

16

/

20

Passed

Validation

87%

Checks the skill against the spec for correct structure and formatting. All validation checks must pass before discovery and implementation can be scored.

Validation — 14 / 16 Passed

Validation for skill structure

CriteriaDescriptionResult

skill_md_line_count

SKILL.md is long (857 lines); consider splitting into references/ and linking

Warning

frontmatter_unknown_keys

Unknown frontmatter key(s) found; consider removing or moving to metadata

Warning

Total

14

/

16

Passed

Repository

administrakt0r/AI-Agents-Safe-Coding-Skills

Path

skills/electron-development/SKILL.md

Reviewed

Table of Contents

Is this your skill?

If you maintain this skill, you can claim it as your own. Once claimed, you can manage eval scenarios, bundle related skills, attach documentation or rules, and ensure cross-agent compatibility.