rust-tauri-apps

Pass

Audited by Gen Agent Trust Hub on Sep 19, 2026

Risk Level: SAFE
Full Analysis
  • [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety guidelines, or extract system prompts were detected. The instructions focus purely on Tauri application development.
  • [DATA_EXFILTRATION]: No sensitive file paths, hardcoded credentials, or suspicious network operations are present. The skill explicitly advises against sending secrets to the frontend.
  • [OBFUSCATION]: No hidden content, encoded strings, zero-width characters, or homoglyphs were identified in any of the files.
  • [REMOTE_CODE_EXECUTION]: The verification commands use standard Rust toolchain utilities (cargo fmt, cargo test, cargo clippy) in a local context. There are no patterns involving remote script execution or unverifiable dependencies.
  • [COMMAND_EXECUTION]: Shell commands are limited to standard development workflows. The skill provides warnings about the risks of sidecars and shell access, emphasizing strict argument validation.
  • [INDIRECT_PROMPT_INJECTION]: While the skill describes an agent that processes untrusted frontend data, it includes mandatory security guidance for sanitizing and validating that input, effectively mitigating injection risks.
  • [PRIVILEGE_ESCALATION]: No commands for acquiring elevated permissions (e.g., sudo, chmod) or modifying system-level configurations are present.
  • [DYNAMIC_CONTEXT_INJECTION]: No use of the dynamic execution syntax (!command) was found in the SKILL.md file.
Audit Metadata
Risk Level
SAFE
Analyzed
Sep 19, 2026, 09:18 AM