Both desktop loadouts start from the same rule: the window shows untrusted web content, and only the native side may touch files, the shell or the network. For Electron that means contextIsolation, sandboxed renderers, narrow preload APIs and IPC handlers that check the sender. For Tauri 2 it means capability files that grant each window only what it needs. Each ships a static check the verifier runs on a good and a bad project.
Every one installs for Claude Code, Codex CLI, Cursor, Gemini CLI, Antigravity CLI and GitHub Copilot unless its card says otherwise.
Electron rules for agents: sandboxed renderers, narrow contextBridge APIs, sender-checked IPC, deny-by-default windows, CSP and fuses, with a static security check.
Tauri 2 rules and a permissions skill: capabilities for named windows, scoped fs and http, no shell execute, a CSP kept, plus a checker that flags wide grants.
Looking for something narrower? Search within Desktop apps or filter everything.