tauri-bridge-setup
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFE
Full Analysis
- [COMMAND_EXECUTION]: The skill involves standard shell commands for project setup, including copying a bridge module from the
tauri-agent-toolspackage and running verification commands to ensure the bridge is active. These actions are transparent and consistent with the skill's stated purpose of environment configuration. - [EXTERNAL_DOWNLOADS]: The instructions require adding common, well-known Rust dependencies (e.g.,
serde,tiny_http,uuid) to the project'sCargo.toml. These are standard libraries from the official crates.io registry and are appropriate for the bridge's functionality. - [DYNAMIC_EXECUTION]: The bridge implements a
/evalendpoint that allows for JavaScript execution within the Tauri webview. This capability is restricted to debug builds viacfg!(debug_assertions)and is protected by mandatory token authentication, aligning with secure development practices for automation and testing tools. - [DATA_EXFILTRATION]: The bridge exposes application state information (logs, process trees, and window labels) through authorized HTTP endpoints. This data access is the primary purpose of the tool for developer introspection and is gated by the same security mechanisms as the execution endpoints, preventing unauthorized external access.
Audit Metadata