Audit an Electron app against the official security checklist to detect vulnerabilities in BrowserWindow configuration, main process code, preload scripts, and HTML.
Generate @electron/fuses configuration to disable dangerous runtime features, locking them against user re-enablement. Set recommended, strict, or custom security levels to harden your Electron app.
Scan Electron source code to detect dangerous patterns: shell.openExternal with user input, disabled webSecurity, missing navigation restrictions, and unrestricted window creation. Fix OWASP-style vulnerabilities before deployment.
Drive, inspect, and assert on real Electron desktop apps from an AI agent — agent-native, Playwright-style automation with accessibility refs, stable error codes, and retrying assertions
MCP server for interacting with and debugging Electron apps, providing tools for window automation, IPC, logs, and main-process state via CDP and Node inspector.
Configure custom protocol deep linking in Electron apps: handles URL routing, single/multi-instance modes, and platform-specific settings for macOS, Windows, and Linux.
Generate complete Electron auto-update configuration with electron-updater, including main process setup, event handling, renderer notifications, and signing requirements for GitHub, S3, or generic HTTP servers.
Run preflight checks on Node, Playwright, Electron, and environment settings without launching Electron. Inspect failures and warnings before starting a session.
Spawn an Electron application by running an npm script, forwarding debug ports for remote debugging. Designed for electron-forge projects where the dev server starts first.
Retrieve details about running Electron applications and their windows, including child windows, by leveraging remote debugging on port 9222. Ideal for automation and debugging workflows.