debug-tauri

Pass

Audited by Gen Agent Trust Hub on Aug 24, 2026

Risk Level: SAFE
Full Analysis
  • [COMMAND_EXECUTION]: The skill utilizes standard system utilities such as ps, pgrep, and screencapture (macOS) through bash scripts (capture.sh, validate_setup.sh) to gather diagnostic information about running application processes.
  • [EXTERNAL_DOWNLOADS]: Documentation and migration guides reference official Tauri ecosystem plugins including tauri-plugin-log and tauri-plugin-screenshots. These are standard dependencies for Tauri application development and no automated execution of unverified remote code was found.
  • [DATA_EXPOSURE]: The skill accesses application-specific log files (e.g., debug.log in ~/Library/Logs/) and saves screenshots to /tmp. These operations are transparent, documented, and intended for local debugging and report generation.
  • [INDIRECT_PROMPT_INJECTION]: The skill processes application logs and WebView state data, which constitutes an ingestion surface for potentially untrusted content.
  • Ingestion points: Reads log files via analyze_logs.sh and WebView metadata via the captureWebViewState function.
  • Boundary markers: None identified in the diagnostic scripts.
  • Capability inventory: File system read access, process listing, and UI screenshot capture.
  • Sanitization: Log analysis relies on standard grep filtering; no specific sanitization of log content before analysis is performed.
Audit Metadata
Risk Level
SAFE
Analyzed
Aug 24, 2026, 08:10 PM
Security Audit — agent-trust-hub — debug-tauri