rust-tauri-apps
Pass
Audited by Gen Agent Trust Hub on Sep 19, 2026
Risk Level: SAFE
Full Analysis
- [PROMPT_INJECTION]: No attempts to override agent behavior, bypass safety guidelines, or extract system prompts were detected. The instructions focus purely on Tauri application development.
- [DATA_EXFILTRATION]: No sensitive file paths, hardcoded credentials, or suspicious network operations are present. The skill explicitly advises against sending secrets to the frontend.
- [OBFUSCATION]: No hidden content, encoded strings, zero-width characters, or homoglyphs were identified in any of the files.
- [REMOTE_CODE_EXECUTION]: The verification commands use standard Rust toolchain utilities (
cargo fmt,cargo test,cargo clippy) in a local context. There are no patterns involving remote script execution or unverifiable dependencies. - [COMMAND_EXECUTION]: Shell commands are limited to standard development workflows. The skill provides warnings about the risks of sidecars and shell access, emphasizing strict argument validation.
- [INDIRECT_PROMPT_INJECTION]: While the skill describes an agent that processes untrusted frontend data, it includes mandatory security guidance for sanitizing and validating that input, effectively mitigating injection risks.
- [PRIVILEGE_ESCALATION]: No commands for acquiring elevated permissions (e.g., sudo, chmod) or modifying system-level configurations are present.
- [DYNAMIC_CONTEXT_INJECTION]: No use of the dynamic execution syntax (
!command) was found in the SKILL.md file.
Audit Metadata