tauri

Pass

Audited by Gen Agent Trust Hub on Sep 4, 2026

Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATION
Full Analysis
  • [COMMAND_EXECUTION]: The skill provides extensive documentation of development commands (e.g., npm create tauri-app, cargo add, npm run tauri dev) necessary for building and managing Tauri projects. These are standard framework operations.
  • [REMOTE_CODE_EXECUTION]: The file references/00-overview.md references the official installation method for Rust: curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh. While this involves piping remote code to a shell, it is the authoritative and expected installation method for the Rust compiler from a well-known source.
  • [EXTERNAL_DOWNLOADS]: The utility script scripts/check-updates.py connects to the official Rust package registry at https://crates.io/api/v1/crates/tauri to compare the skill's tracked version with the latest upstream release. This is a legitimate maintenance function.
  • [PRIVILEGE_ESCALATION]: Setup instructions in references/00-overview.md and references/08-mobile-development.md include commands using sudo for system package installation on Linux and dependency management (CocoaPods) on macOS. These are required administrative actions for environment configuration.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 4, 2026, 10:30 AM
Security Audit — agent-trust-hub — tauri