Over a two-month period, contributed to security and governance enhancements across the OneKeyHQ/cross-inpage-provider and OneKeyHQ/app-monorepo repositories. Focused on strengthening Electron desktop application security by implementing sandboxing for preload scripts and desktop WebView, using JavaScript, TypeScript, and advanced webpack configuration to align with platform security standards. Coordinated changes across multiple repositories, ensuring safer defaults without impacting user-facing features. Additionally, refined bug bounty policy documentation in Markdown, clarifying the scope of accepted vulnerability reports and improving risk management processes. The work emphasized technical execution in Electron development, front-end engineering, and clear documentation to support secure and maintainable codebases.