tauri
Pass
Audited by Gen Agent Trust Hub on Sep 4, 2026
Risk Level: SAFECOMMAND_EXECUTIONREMOTE_CODE_EXECUTIONEXTERNAL_DOWNLOADSPRIVILEGE_ESCALATION
Full Analysis
- [COMMAND_EXECUTION]: The skill provides extensive documentation of development commands (e.g.,
npm create tauri-app,cargo add,npm run tauri dev) necessary for building and managing Tauri projects. These are standard framework operations. - [REMOTE_CODE_EXECUTION]: The file
references/00-overview.mdreferences the official installation method for Rust:curl --proto '=https' --tlsv1.2 -sSf https://sh.rustup.rs | sh. While this involves piping remote code to a shell, it is the authoritative and expected installation method for the Rust compiler from a well-known source. - [EXTERNAL_DOWNLOADS]: The utility script
scripts/check-updates.pyconnects to the official Rust package registry athttps://crates.io/api/v1/crates/taurito compare the skill's tracked version with the latest upstream release. This is a legitimate maintenance function. - [PRIVILEGE_ESCALATION]: Setup instructions in
references/00-overview.mdandreferences/08-mobile-development.mdinclude commands usingsudofor system package installation on Linux and dependency management (CocoaPods) on macOS. These are required administrative actions for environment configuration.
Audit Metadata