tauri-debug-quickstart
Pass
Audited by Gen Agent Trust Hub on Oct 2, 2026
Risk Level: SAFECOMMAND_EXECUTIONDATA_EXFILTRATIONINDIRECT_PROMPT_INJECTION
Full Analysis
- [COMMAND_EXECUTION]: The skill relies on the
tauri-agent-toolsCLI to perform various system and application level operations for troubleshooting. Evidence: Commands liketauri-agent-tools diagnose,tauri-agent-tools forensics, andtauri-agent-tools process-treeare used to interact with the operating system, file system, and running processes. Thesidecar tapcommand allows wrapping and running sidecar executables for isolation and validation. - [DATA_EXFILTRATION]: The skill facilitates the collection of logs, system reports, and process information for debugging. Evidence: The
bundleanddiagnosecommands aggregate system data into archives. The skill explicitly addresses security risks by noting that these tools produce a "redacted dir" and stating that "images require review before sharing," showing a design that incorporates data privacy controls. - [INDIRECT_PROMPT_INJECTION]: The skill provides instructions for the agent to ingest and analyze external data sources such as application logs and OS-level log streams. 1. Ingestion points:
tauri-agent-tools logs(merges on-disk logs),tauri-agent-tools forensics(reads DiagnosticReports), andtauri-agent-tools os-logs(filters platform log streams). 2. Boundary markers: The skill mentions tool output conventions like NDJSON and markdown summaries which provide structural boundaries for the agent. 3. Capability inventory: Thetauri-agent-toolsCLI has capabilities for file reading, process listing, and interacting with a local bridge plugin. 4. Sanitization: The skill documentation notes that "bundle redaction failures prevent publication," indicating a built-in validation step for handling external content.
Audit Metadata